Transcript API - Xoodyak vs Merlin vs SAFE

[mratsim]

Currently our transcript API is inspired by Merlin (https://merlin.cool/)
but a standard exist called Xoodyak: https://csrc.nist.gov/CSRC/media/Projects/lightweight-cryptography/documents/finalist-round/updated-spec-doc/xoodyak-spec-final.pdf)

constantine/constantine/commitments/README.md

Lines 48 to 56 in 2c3de87

	## Transcripts
	We take inspiration from
	- https://merlin.cool/
	https://github.com/dalek-cryptography/merlin
	- https://github.com/crate-crypto/verkle-trie-ref/blob/master/ipa/transcript.py
	- https://github.com/zcash/halo2/blob/halo2_proofs-0.3.0/halo2_proofs/src/transcript.rs
	- https://github.com/arkworks-rs/poly-commit/blob/12f5529/poly-commit/src/ipa_pc/mod.rs#L34-L44

[mratsim]

SAFE is also an alternative: #353