Don't emit STs when accessing STs outside provable code

[rpanic]

Currently, when users use Provable.witness() or Provable.asProver blocks and access the state within, STs will be emitted, which aren't enforced provably though.
We should add in a check that returns the state, but doesn't emit STs in the process.
Additionally, .set calls should be disallowed in witness blocks