Do not send RetryCounter in EAC1OutputType (see #344)
Rework EAC Protocol flow (fixes #344)

BSI TR-03112-7 sec. 3.6.4 defines which elements must be present at which protocol message.
There is the possibility to receive the signature at various times in the flow. This part has been
added and the TerminalAuthenticationStep and ChipAuthenticationStep have been updated
accordingly.
Further fixes are:
- send Challenge in EAC1OutputType
- fix ordering of Elements in EAC1OutputType