dauth.hadhdrbg: Support per-instance defaults for 'predictionResistance' and 'extraInput'.
dauth.hadhdrbg: WrappedStreamRNG exposes per-instance access to underlying RandomStream, so HashDRBG users can access 'predictionResistance' and 'extraInput'.