Tighter Security for Schnorr Identification and Signatures: A High-Moment Forking Lemma for Σ-Protocols