Extend HTTP field support in `http-message-sig`

[thibmeu]

The current support for HTTP field is rudimentary.

For instance, as per Section 2.1 of RFC9421, we should add sf and bs.

web-bot-auth may not need them yet, but that would be a nice to have.

cc @AkshatM