[prop220] send AUTHENTICATE cells with correct ed25519 signatures

When we're using AuthType2, we send a new AUTH0002 cell, with a slightly different format from the one we use today. It's documented in section 4.2 of prop220.

It's mostly implemented in my work-in-progress Ed25519 branch.