Proving UTXO set inclusion in zero-knowledge

So no guarantee that the utxo set inclusion proof cannot be double-spend, and as such a channel_announcement being unboundedly replay to dos lightning nodes.