Crypto: add watermark support to BLS signatures and checks

Context

This MR is a prerequisite for tz4 accounts (!5444 (merged)) and comes before !6282 (merged).
In order to use BLS keys to sign operations, and blocks, it must support adding watermarks to the message.

Manually testing the MR

dune build @src/lib_crypto/runtest