Add a metric for invalid ZKAP attempts

Fixes #260

This does not expose the total number of ZKAPs that are considered invalid. Instead it just counts the number of operations attempted where an invalid ZKAP is observed. Maybe this will provide sufficient visibility. There is still only one way we can recognize a pass as invalid - invalid signature - so there's only one label on this metric. It should be straightforward to add more ways as we define them.