Prio3: Add support for multiple proofs

As of draft-irtf-cfrg-vdaf-08 it's possible to configure to Prio3 so
that the Client generates (and the Aggregators verify) multiple FLPs for
the same measurement. This commit adds support for this feature. While
at it, this commit de-duplicates some of the code used to derive field
elements from seeds.