sys/param.h cleanup, mostly using MINIMUM() and <limits.h>
ok dtucker

unit tests for sshbuf_peek/poke bounds-checked random access
functions. ok markus@

unit tests for new buffer API; including basic fuzz testing