TMR client-side STARK / WASM research demo

Research only: this is an integrity proof demo, not production ZK. The scalar state is not a Merkle root, and the toy nullifier is not secure.

Old state (field scalar) Delta Secret witness Domain separator

Build the WASM package first (see README).