add optional Hash16(K) and M − 2 fields to share encoding scheme

* Hash16(K) enables a share joiner to verify that all presented shares were decomposed from the same secret.
* M − 2 enables a share joiner to detect whether a sufficient number of shares have been presented.