EdDSA: Reject large signatures before decoding

Don't even base64-decode absurdly large EdDSA signatures; there's no
point.

The cut-off is intentionally not on precise possible max size of a
signature, but on something significantly larger, because the concern
is merely pointless memory allocation.