Make the Transcript and RNG structs opaque.

One way to do this is to return a pointer to an opaque struct. This is a little tricky since the code has to work without `malloc`, so I think doing this would require using `alloca`.

Another option would be to define sizes for the types and require that callers allocate a slot of that size.