BIP324: Handshake prerequisites
Depends on #25361 for some constants, and on https://github.com/bitcoin-core/secp256k1/pull/1129 for ellswift integrated XDH but can be reviewed independently. Only the last 5 commits belong to this PR.
This PR adds xonly ECDH and HKDF key derivation code for BIP324. Unit, bench and fuzz tests are included.
The dependency tree for BIP324 PRs is here.