tor-rtcompat: Provide TLS wrapping for all streams

I did this in order to support providing TLS support in arti-hyper (followon to !348 (merged)). But that was doomed, because our TLS traits only offer negotiate_unvalidated and the example wants "proper" TLS.

I thought it worth keeping this API change.