Proof aggregation improvements

[mdehoog]

This PR implements two improvements:

• only generate 1000 proofs before attempting aggregation. If we're far behind, this ensures we test aggregation occasionally, rather than failing on a huge amount of proofs at once
• only clear the pending if the enclave returns a non-recoverable error (like invalid signer), otherwise we lose a whole bunch of valid proofs