dnssec/signature: fix wildcard signatures

When reconstructing the signed data for RRSet synthesized from wildcard,
omit leftmost name labels for each RR in RRSet, not only for the first RR.
3 jobs for fix-irsgov
in 1 minute and 4 seconds and was queued for 1 second