Add application data protection tests

[bifurcation]

Tests three scenarios:

• Unprotect in the same order as protect
• Out-of-order unprotect within an epoch
• Out-of-order unprotect across epochs

Also, updates the RPCs to exercise MLSCiphertext.authenticated_data.