Drop redundant `pk1` witness from C1

[cedoor]

pk1 is determined by the CRS (a / CRP), so we should not take pk1is in main, should hash/commit the public key using a directly, and can drop the pk1 == a constraints.