policy TLS_FORWARDING: rename pin to pin_sha256

The pin parameter contains SHA-256 encoded using Base64, but this is not
the only option. Explicit name allows us to add alternative formats
later on, and is consistent with GnuTLS naming.
14 jobs for tls_tests
in 6 minutes and 39 seconds and was queued for 9 seconds