Fiat–Shamir Bulletproofs are Non-malleable (in the Random Oracle Model)