Refactor third-party caveat encoder/decoder to caveatid package.

Remove non-public key third-party caveatid encoding. This can be added
later as an alternative implementation of CaveatId{Encoder,Decoder}.
Updated httpbakery & tests accordingly.