build: secp256k1 as a subdir, since it's required