hs: Move end_sig_fields field of ESTABLISH_INTRO v3 cell before sig_len
There's a spec bug that we need to fix, which goes along with a corresponding trunnel bug: The @ptr end_sig_fields marker in hs_cell_establish_intro needs to be before sig_len. Otherwise we can't handle future signature schemes where sig_len is not determined until the signature is generated.