tor-hsclient: Add configuration settings

This doesn't include client auth configuration, just circuit retry parameters, and enablement.

For now, I'm assuming that the answer to #922 (closed) is "it should be enabled by default"

Note The branch is on top of a merge of !1290 (merged) with main.