prop280: Finish privcount-in-Tor proposal (280)

There are some open discussion issues in prop280. We should wrap them up so we can get an implementation merged.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information