feat: eccvm sumcheck with commitments to round univariates

[iakovenkos]

• combined with SmallSubgroup inner product argument, ensures that the sumcheck round univariates do not leak witness information
• drastically reduces the eccvm proof size - instead of sending 24 coefficients of each round univariate, the prover sends eval at 0, 1, and a group element
• reduces eccvm recursive verifier costs by avoiding expensive evaluations of polys of degree 23 (each eval ~3000 gates)