dsa: factor out non-fips extraction mode

Adding flags just turns the api into a christmas tree of options, while giving
legitimacy to people that didn't bother to read the standards.

Interop with dsa implementations that have a broken bits2int is now provided as
an adapter.