Improve wraparound check parameter search

The improvements come as:
- We now look for the smallest r_succ that satisfies soundness,
  then searches for alpha (if possible) that can satisfy ZK.
- Then combine with dimension to compute the number of proofs to
  satisfy the overall soundness.

Turns out with num_frac_bits = 24, neither Field56, nor Field48
can satisfy the field size requirement in wraparound checks.