Twisted Edwards in extended coordinates

Currently, gnark-crypto implements twisted Edwards arithmetic in affine coordinates and [projective coordinates](https://www.hyperelliptic.org/EFD/g1p/auto-twisted-extended.html). We should implement [extended coordinates](https://www.hyperelliptic.org/EFD/g1p/auto-twisted-projective.html) as they allow faster arithmetic out-circuit.