Fix/flounder audit circuit

[blake-pro]

This PR fixed the following issues:

1. Bind recursive header, commit, and state chain states to the verified zkm_public_values, removing the prover-controlled state payload from PrevProof. It also propagates host-side proof verification failures as errors instead of panicking.
2. Bind the commit-chain output transaction to the transaction proven by SPV, preventing an unrelated valid SPV proof from substituting for the target commit.
3. Prevent tampered Groth16 vk and unsafe archive paths from compromising the node.