Avoid duplicate calls to *_Final when dropping Hasher and HMAC

An assertion triggered in finalize() would lead to drop() erroneously redoing the finalization. Set the state to Finalized unconditionally to prevent this.