Griffin

On top of !352 (merged)

+Griffin.test_apply_permutation.valid:
+Constraints: 161
+
+Griffin.test_apply_permutation.valid_optimized:
+Constraints: 157

See https://eprint.iacr.org/2022/403.pdf. Paper gives 214, but we are getting around ~150 constraints thanks to the custom gates qx5 and qx2.