pub fn rotr32(a: [Field; 32], n: usize) -> [Field; 32]
Rotate-right by n bits (pure re-wiring, zero gates): out[i] = a[(i+n) % 32].
n
out[i] = a[(i+n) % 32]