Use nullifier hash as public input to verification instead of nullifier, keep nullifier secret.

[drewstone]

I think the way we're handling things is by disclosing the nullifier as a public input to the verification gadget. We should instead be using the hash of the nullifier and storing those.

Some similar areas:

• https://github.com/tornadocash/tornado-anonymity-mining/blob/master/src/account.js#L12