Zcash orchard

• CVE-2026-54496 Critical 9.3 Missing copy constraint in halo2_gadgets variable-base scalar multiplication allows under-constrained base, breaking Orchard Action circuit soundness 0.3%