* Fix crypto/merkle ProofOperators.Verify to check bounds on keypath parts. * Update PENDING
* Fix general merkle keypath to start w/ last op's key * Update CHANGELOG_PENDING.md