[crypto] Make the signature APIs use iovec inputs

[mcy]

This is mostly to enable zero-copy signing for things like CBOR and some of the Cerberus challenge messages, which compute signatures over disjoint buffers.