[ZIP 312] Shielded Multisignatures using FROST

[daira]

Information about FROST: https://crysp.uwaterloo.ca/software/frost/

An earlier idea for how to do multisignatures was zcash/zcash#3946 , but that would have required circuit changes; FROST does not.