tor-proto: use const-time eq on sendme tags.

There's no known attack here, but it's best practice to always compare digests using a constant-time comparison operator.

This resolves an XXXX comment.