Cookies digest config option (pt. 2)

Another take on https://github.com/rails/rails/pull/16434

Now with comma, support for encrypted jar plus better test for verifier and new ugly test encryptor.

/cc @tamird @chancancode
i think the explicit default here is a positive - we don't want changes to the general behaviour of AS::MV to invalidate all cookies accidentally