DNSSEC: add knot_rdata_rrsig_signature() and use when possible

At some places in signing implementation usage of this function
is not possible, because we are working with plain RDATA and not
RR set.

refs #4