Add a newtype for a Sapling nullifier

[str4d]

We don't appear to have one, which has led to various parts of the codebase using either [u8; 32], Vec<u8>, or &[u8] in their APIs. We should have a struct Nullifier([u8; 32]) to ensure type safety.