Optimize doubling: secp256k1 has no y=0 point

This gives a 1.5% verification improvement when using the endomorphism, 2.3% improvement when not.