Seemingly incorrect progression in eddsa-and-ed25519.md

[fresheneesz]

Under the "How does it work" section, it says:

P1 = s * G = (r + h * privKey) mod q * G = r * G + h * privKey * G = R + h * pubKey

The last step seems erroneous. The privKey is converted into pubKey without any obvious mathematical operation. Is that correct? If so, I think some additional steps would need to be there for clarity.

(PS thanks for writing this!)