Refactor rep_hist_format_hs_stats() to add noise when counters are initialised
This makes the code shorter, and the security guarantees easier to reason about (it's how experimental privcount does it).
See legacy/trac#23414 (moved) for background.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information