Deal with initial_scid, retry_scid, and original_dcid.  We need to set
and get QUIC transport parameters timely manner.  Therefore, transport
parameter operations are now done by ngtcp2_crypto library.
Applications do not need to do set it manually.  Added several
callback function implementations to ngtcp2_crypto library which can
be directly passed to ngtcp2_callbacks: client_initial, recv_retry,
and recv_client_initial.  Installation of initial packet number space
encryption keys is now handled by ngtcp2_crypto library.  They are
done in ngtcp2_crypto_client_initial_cb, ngtcp2_crypto_recv_retry_cb
and ngtcp2_crypto_recv_client_initial_cb.

This commit separates key installation function into 2 and let TLS
stack install rx and tx keys separately for handshake and 1RTT keys.
This change is aligned to the new BoringSSL API and GnuTLS API.  I
expect that OpenSSL will follow this change.  It also removes side
argument from crypto API if it can be inferred by
ngtcp2_conn_is_server.

Remove conn and user_data from encrypt/decrypt/hp_mask callbacks so
that they can be used without conn.

Fixes: https://github.com/ngtcp2/ngtcp2/issues/213

so that application is not bothered by another cryptic function.

* `ngtcp2_crypto_generate_stateless_reset_token` - Used to generate
  a stateless reset token as an HKDF extraction using the CID and
  a token secret as input.

Instead of installing key and iv with ngtcp2_conn_update_key, pass key
and iv buffers to ngtcp2_update_key and let application fill those
buffers.