regen test data after mktestdata.sh changes

Regenerate test keys with certs signed with ed25519 instead of ecdsa.
These can be used in -portable on platforms that don't support ECDSA.

unit and fuzz tests for new key API