Linear-size Pedersen Polynomial Commitment

The prover sends a Pedersen Commitment for each coefficient.

Evaluation phase: The verifier computes the commitment for $⟨u,y⟩$ using additive homomorphism of Pedersen commitments. Then the verifier can open it (or prove that it knows how to open it.)