Schnorr Signatures · BIP-340
Generate a key, sign a message, and verify it with real BIP-340 arithmetic — then step
through the equation s = k + e·x, reuse a nonce to recover the private key,
and watch two signatures add into one.