Move transcript replay to proof shape

[kunxian-xia]

Summary

• move VM verifier transcript prefix replay and alpha/beta sampling into proof-shape preflight/AIR
• keep public-value transcript receives in PublicValuesAir and remove transcript ownership from VmPvsAir
• update debug transcript helpers to derive lookup challenges through ProofShapeModule

Tests

• cargo fmt --all
• git diff --check
• cargo check -p ceno_recursion_v2 --all-targets
• cargo make clippy
• scripts/run_e2e_test.sh