crypto.ecdsa: stricter DER decoding of signatures (#23554)

Reject DER-encoded signatures with the top bit set but no leading
0x00

Also add test vectors from Project Wycheproof with ECDSA-P384

Author: jedisct1