Another wave of PRC3 feedback

[SebastienGllmt]

This PR makes more changes to PRC3 based on my discussion with @matejos

1. (new feature) The IInverseAppProjectedNft optionally takes a new parameter _verificationData to its mint function for cases where the mint validity can be verified (ex: zk proof). See Update inverse app projection to work with ZK proofs paima-engine#327
2. (new feature) The IInverseAppProjectedNft now exposes a currentNonce getter for cases frontends want to know the nonce for the user's address
3. (refactor) Tracking invalid mints section moved because it was in the wrong place
4. (security fix) All NFTs now need to have a validity trait type to allow users to safely place collection offers
5. (security fix) the state transition to process the inverse projection should never fail → should never fail for any reason other than signature mismatch. If the user's signature doesn't match, we shouldn't increment userTokenId otherwise you could grief a user by minting many failed txs on their behalf