libathemecore, *serv: unify all three copies of create_challenge()

All three services now use copies of the same function for DROP confirmation, so it was moved to libathemecore.

I should've probably done this along with the NickServ DROP patch… oh well.