openpgp: Extend StandardPolicy to consider hash algorithms.

  - Extend `StandardPolicy` to consider hash functions when evaluating
    signatures.

  - Use defaults that are based on published attacks.

  - Provide an interface to modify the policy.