Fe25519.canonicalize
private
void canonicalize() pure nothrow @safe @nogcReduces to the canonical range [0, p) so toBytes emits minimal encodings: folds the weight at 2^255 (factor 19), then conditionally subtracts p exactly once. All steps are mask-based.