execution proof

[XuyangSong]

Summary

• Add an execution proof circuit (arm_circuits/execution_proof) that verifies a batch of transactions against shared commitment and nullifier state inside a RISC0 zkVM guest
• Add an incremental Merkle tree for commitment insertions
• Add an indexed Merkle tree with non-membership proofs and atomic insertion witnesses for nullifier tracking
• Expose ExecutionProofWitness and ExecutionProofInstance types in the anoma-rm-risc0 crate, including batch_aggregation_vk and compliance_vk fields so verifying keys are bound to the journal
• Add app_data to ExecutionProofInstance via ResourceAppData (per-resource tag, logic vk, and payload)

The circuit enforces per-batch:

1. Nullifier uniqueness across all compliance units
2. Delta proof validity per transaction
3. Aggregated compliance + logic proof verification with logic-ref consistency checks
4. Nullifier non-membership + insertion into the indexed nullifier tree
5. Commitment insertion into the incremental commitment tree

Test plan

• Structural tests (no prove feature) covering tree state transitions with empty and non-empty batches
• prove-gated integration tests exercising the full circuit end-to-end