`const fn` support

[tarcieri]

In crypto-bigint we've had to build an entirely parallel set of types in order to support const fn: ConstChoice and ConstCtOption, which are const fn-friendly versions of subtle's equivalent Choice and CtOption.

It would be nice to have upstream support for this in subtle some way.