proto: Make sure that auth tags are truncated to 20 bytes
Onion service hops (pointlessly) use SHA3-256 for their authentication, but they truncate it to 20 bytes (assuming I'm reading the C right.)
See torspec#204 (closed) for clarification here.
This will help us get onion services working, and is a possibly less bodgy version of !1241 (closed).