build: repin to noir-zk 0.3.3, eid-circuits v0.8.2 and zk-encryption v0.1.3

[tonyvelichko]

The coordinated repin, all three pinned exactly together:

• noir-zk 0.3.3 (perf(kernels): take the key hash as a witness, hash each Merkle level once (-14% kernel_step) noir-zk#10): the kernels take each verification key's hash as a witness (bb constrains it in-circuit; regression-tested), hash each Merkle level once; kernel_step 29,965 → 25,878 gates.
• eid-circuits v0.8.2 (perf(rsa): 2-bit windowed exponentiation, 9-20% fewer gates in every RSA step eid-circuits#32, #33): RSA steps with a 2-bit windowed exponentiation, 9–20 % fewer gates.
• zk-encryption v0.1.3 (perf(session): 3,254 fewer gates in the lattice encryption (channel_session 1.1.0) zk-encryption#4, #5): the session app 53,381 → 50,127 gates.

pins.toml: versions, catalogs and their SHA-256, the kernels family root, the pipeline and deployment roots (deployment 0x26c8ef80…9bf5). This repository's layers are unchanged (freeze --check with noir-zk 0.3.3: 3 circuits match; their Noir library deps moved to the same tags with identical bytecode).

Measured (scripts/demo.sh, Apple M5 Max; peak memory with /usr/bin/time -l):

step	before	after	Δ
register, US passport (RSA-4096 → RSA-2048)	1.83–1.89 s	1.67–1.68 s	−9 to −11 %
register, DE passport (brainpool)	3.85–4.05 s	3.86–3.87 s	≈ 0
deposit / transfer / split / merge / withdraw	1.35–1.49 s	1.26–1.27 s	−6 to −15 %
peak memory (transfer, US registration · DE registration)	1.00 · 1.38 GB	1.00 · 1.39 GB	≈ 0

Gas is unchanged (one ZK_VERIFY per transaction).

Checked: pins (zkpool info --check, the remote catalogs), Noir tests (16), Foundry (19), cargo test, fmt, clippy, the holder-binding proof, the devnet test, scripts/demo.sh.