Practical Product Proofs for Lattice Commitments