Round-3 Dilithium-5 vs FIPS 204 ML-DSA-87: what doesn't wire-match

A transaction signature on the chain we're building is 4,595 bytes. An Ed25519 signature is 64. A...