Modeling the Faerie-Gold Vulnerability

We wrote a Quint spec for the Faerie-Gold attack in the Zerocash protocol, plus a ZCash-like fix.