replace compat/rand_lib.c with a thin arc4random_buf wrapper on top of libottery

this allows us to use the OS arc4random_buf as-needed