use Hash rather than _HashContext in RSA/DSA

This change lets us remove the AlreadyFinalized checks from the backend signature and verification contexts in the OpenSSL backend.