goas: use domain seperators for the different zone transaction types

Currently we risk some attacker being able to create tx's where `withdrawal.to_bytes() == deposit.to_bytes()` and this can be used to fool a tx inclusion proof.