Attestations circuit: super attestations

Prototype and evaluate the effectiveness of doing multi-message aggregation aka Super attestations, which reduces the number of pairings almost in half.

The experimental results should find the difference in proof generation time and constraint number. The conclusion should take into account the use of hardware acceleration (what types of computation are dominant with each approach so that it's more compatible with HA).

### [Spec](https://hackmd.io/@timofey/HyKLBMcBn#Multi-message-aggregation)

### References
- https://xn--2-umb.com/22/bls-signatures/index.html#many-signers-many-messages
- https://github.com/ChainSafe/Zipline/blob/main/zipline-verifier/src/super_attestation.rs#L53