fix: verify checkpoint headers in getEpochProofPublicInputs (A-1373)

getEpochProofPublicInputs sources the fee recipient/value from the supplied
checkpoint headers but never validated that they hash to the stored headers, so
a mismatch only reverted on the on-chain submit path instead of when an
off-chain caller assembles the public inputs. Call verifyHeaders in the getter
as well, and import ProposedHeaderLib in Rollup.t.sol so the test that exercises
this path compiles.

Author: spalladino

l1-contracts/src/core/libraries/rollup/EpochProofLib.sol

@@ -183,6 +183,11 @@ library EpochProofLib {
       }
     }
 
+    // The fee recipient/value below are sourced from the supplied headers, so the header hashes must be validated here
+    // as well as on the submit path - otherwise an off-chain caller of this getter would assemble public inputs from
+    // unverified fee fields and only discover the mismatch when the on-chain proof reverts.
+    verifyHeaders(_start, _end, _headers);
+
     bytes32[] memory publicInputs = new bytes32[](Constants.ROOT_ROLLUP_PUBLIC_INPUTS_LENGTH);
 
     // Structure of the root rollup public inputs we need to reassemble:

l1-contracts/test/Rollup.t.sol

@@ -12,7 +12,7 @@ import {Registry} from "@aztec/governance/Registry.sol";
 import {Inbox} from "@aztec/core/messagebridge/Inbox.sol";
 import {Outbox} from "@aztec/core/messagebridge/Outbox.sol";
 import {Errors} from "@aztec/core/libraries/Errors.sol";
-import {ProposedHeader} from "@aztec/core/libraries/rollup/ProposedHeaderLib.sol";
+import {ProposedHeader, ProposedHeaderLib} from "@aztec/core/libraries/rollup/ProposedHeaderLib.sol";
 
 import {
   IRollupCore,