Verifier: represent elements from field F_{p^2} as `real + i * imag`

[markspanbroek]

Reason: Circom and Ethereum EIP-197 both represent these elements as arrays of two elements, but they do it in reverse order of each other. This change makes it explicit which number is the real part, and which number is the imaginary part.