scd:nks: Add support for signing plain SHA-3 digests.

* scd/app-nks.c (do_sign): Handle plain SHA-3 digests and verify
encoding of ASN.1 encoded hashes.

This makes it possible to create CSRs for NetKey card keys which are
signed with SHA256 by default.

• GnuPG-bug-id: T5184