This adds support for OpenSSH SSHSIG signatures, used for signing
arbitrary payloads.
This also adds support for public-key verification from -SK algorithms
so that signatures from security keys can be verified. This enables
using security keys for SSHSIG, as well as using security keys as
SSH-cert CAs.