pub fn h3_nonce(seed: &[u8], msg: &[u8]) -> Scalar
H3 — nonce randomness. Maps a 32-byte seed + message to a scalar mod ℓ.