tor-proto: New extend() and create_firsthop() to pick between ntor and ntor3

In the future, when we add more circuit handshakes (PQ anyone?) we'll want to have the logic for choosing which to use be unified. Almost nobody calling tor-proto should need to care which circuit handshake is actually going to be used.

Closes #1970 (closed).