Fix messages returned from nacl.sign.

We cut them from the wrong side!

Make crypto_sign_open return mlen, and use it to cut message
from _the end_.