tlsexttest: check additional logic in tlsext randomization

tlsexttest: check additional logic in tlsext randomization

This verifies that we put PSK always last and that the Apache 2 special
does what it is supposed to do. There is also some weak validation of
the Fisher-Yates shuffle that will likely catch errors introduced in
tlsext_randomize_build_order()