feat: implement noble decaf448/ristretto255 groups

[sublimator]

Changes

• Adds support for Decaf448 and Ristretto groups for the noble implementation.
• Adds CryptoProvider interface {hash, Group}
• Adds Oprf.Crypto field of above type
• Uses hash(hashID, bytes) method from the CryptoProvider interface
  • uses crypto.subtle.digest for sjcl
  • uses @noble/hashes for noble (WebCrypto doesn't support Shake256)

[sublimator]

My point was that the Group interface has unparameterized hashing methods. i.e. the modeling could be a bit off?

Or was I confused? On mobile atm.

[armfazh]

Thanks @sublimator .