cffi build changes

should prevent failure to install from wheel, due to mismatched hashes.

- move cdefs to zmq_ffi.h
- specify modulename in ffi.verify
- only use one FFI object, only call verify once