Add a new tor_strtok_r for platforms that don't have one, plus tests.

I don't think we actually use (or plan to use) strtok_r in a reentrant
way anywhere in our code, but would be nice not to have to think about
whether we're doing it.