use Hash rather than _HashContext

This change lets us remove the AlreadyFinalized checks from the backend
signature and verification contexts