clz and ctz

[real-or-random]

We have secp256k1_clz64_var in our code and a while ago (safegcd) upstream has added a more polished secp256k1_ctz64_var and secp256k1_ctz32_var. We should probably make these consistent.