Add property based testing for scanning values for tickets

The following discussion from !3591 (merged) should be addressed:

• @yrg started a discussion: (+2 comments)

  These hand-written tests are fine and looks exhausting.

  However, it would be even nicer to have some property-based testing, typically to catch some stupid mistakes in traversal functions. You could draw some inspiration from the tests found here:

  https://gitlab.com/tezos/tezos/-/blob/master/src/proto_alpha/lib_protocol/test/test_script_typed_ir_size.ml