proto: Make sure that auth tags are truncated to 20 bytes

Onion service hops (pointlessly) use SHA3-256 for their authentication, but they truncate it to 20 bytes (assuming I'm reading the C right.)

See torspec#204 (closed) for clarification here.

This will help us get onion services working, and is a possibly less bodgy version of !1241 (closed).