Schnorr signatures can now be passed to the signature cache,
and they hit a different entry compared to if the same 64-byte string would
be interpreted as an ECDSA signature.

Depends on D2353 and D2348

I added new test code that checks that a cache collision does not
occur.
(I also tried running this test with deliberately colliding nonces, to
verify that test fails.)