Privacy-preserving withdrawal (ZK rollup)