Fix various unsigned to signed comparison warnings.

[benjaminp]

GCC aggressively emit warnings when comparing unsigned and signed integer types, which causes failures works under protobuf's -Werror default. We can fix these often by switching to iterators, but sometimes it's easiest to add a cast or switch a variable type.