Add optional hedged signatures. Update noble deps. Closes gh-4885.

[paulmillr]

This change adds optional extraEntropy argument to sign(). It is false by default. When it is true, random bytes are auto-added. It can also be set to a specific string or uint8array.

There is also a dep upgrade:

• Changes in curves: changelog, diff
• Changes in hashes: changelog, diff
• Other packages have already upgraded to newer libraries, upgrading in ethers will bring security improvements and dep deduplication

Background:

• Improve security of signature generation #4885
• Elliptic.js private key leak preventable with the fix GHSA-vjh7-7g9h-fjfh
• My blog post on the issue: https://paulmillr.com/posts/deterministic-signatures/
• ethresearch blog post: https://ethresear.ch/t/hedged-signatures-ftw/21757
• Fault attacks / attacks against deterministic signatures have been discussed in SH16, BP16, RP17, ABFJLM17, SBBDS17, PSSLR17, SB18, WPB19, AOTZ19, FG19.
• Hedged signatures specs: RFC 6979 section 3.6, BIP340 in 2018-2020 ("Using unpredictable randomness additionally increases protection against other side-channel attacks, and is recommended whenever available."), CFRG draft in 2022