Subprotocol-based circuit negotiation from prop346

We're going to use the negotiation extensions from https://spec.torproject.org/proposals/346-protovers-again.html#negotiating-subprotocol-flags-in-circuit-handshakes for clients to tell relays that they want to use CGO.

Required for #1936 (closed).