Goldilocks NTT and PCS

Fast number theoretic transforms and polynomial commitments over the 64-bit Goldilocks prime field $\mathbb{F}_p$ with

$$ p = 2^{64} - 2^{32} + 1 $$