Make VerifyInclusion check the inclusion path length up-front
If this required size isn't consistent with the rest of the function's logic, that is a bug and reported as a panic. Reserving errors for the expected ways in which a proof can be invalid.