[prop220] send AUTHENTICATE cells with correct ed25519 signatures
When we're using AuthType2, we send a new AUTH0002 cell, with a slightly different format from the one we use today. It's documented in section 4.2 of prop220.
It's mostly implemented in my work-in-progress Ed25519 branch.