hs-v3: Shuffle the client authorization ordering in the descriptor

It would be desirable to shuffle the list of clients in a descriptor (if any) so no one can learn anything from the ordering.

haxxpop has already done code for this: https://github.com/haxxpop/tor/commit/3ac776bd988

This can go post 035 freeze.