feat: verifies new MMR = old MMR + all incremental headers

[yangby-cryptape]

Issue

The old code only checks:

• Whether the new MMR root contains all-new appended headers.

But it doesn't check:

• Whether the new MMR root is a successor of the old MMR root.
• If there exists any headers not list in the new-appended headers, but they are contained in the new MMR root.

As a permissionless solution, it has to avoid those potential attracts.

Solution

Just upgrade the dependency and introduce a new API.

More details could be found in:

• Could I prove a new root is base on the old root with the proof of all new appended items? nervosnetwork/merkle-mountain-range#33
• feat: verify a old root and all incremental items after it nervosnetwork/merkle-mountain-range#35

Tips for Review

• No break changes.
• The positions is removed, since the new API considers that all new appended headers are continuous with the previous headers, so it calculates the positions of headers inside itself.
• Currently, we have unit tests for this change.