Hardening Confidential Federated Compute against Side-channel Attacks