Negotiate and use CGO as available on relays

Once the other parts of CGO are in place, we'll need to negotiate and use CGO when it is available on a relay.

This can't be tested easily unless we also implement tor#41047 (closed), or until Arti relays are operational.

Part of #1936 (closed).