pub fn ntt(f: &mut [i16; 256])
Forward NTT (Algorithm 9) — full Montgomery.
Input: coefficients in [0, q-1]. Output: NTT-domain coefficients, |c| <= 4q (lazy reduced).