API BREAKAGE: add a lows flag to secp256k1_ecdsa_sign

Not sure if tests are necessary here. I've probably oversimplified, but this was enough to get bitcoin's tests passing again with libsecp256k1.