fn negate_s(s: &[u8; 32]) -> [u8; 32]
Negate a 32-byte big-endian number modulo the secp256k1 order. result = ORDER - value