pub fn pack_digits(digits: &[i8; 64]) -> [b6; 128]
Host-side helper: pack signed digits into the hardware sign-magnitude form (base-point scalar in slots 0..54; slots 64.. stay zero). For machines without key lookups.