[contract-deploy] Validate that the deployment nullifier is emitted in the public kernel circuit

[spalladino]

A sequencer should only be allowed to run a public function for a publicly deployed contract, otherwise other nodes may not be able to validate what the sequencer has run. To enforce this, the public kernel circuit should check that the corresponding deployment (not initialization!) nullifier was emitted by the canonical contract instance deployer contract.

Test that calling a public function on a contract that has not been publicly deployed fails, even after manually adding the contract instance information to the node's db.