Insert initial headers like Authentication-Results before the MTA’s Received header

[glts]

The proposed change moves the generated Authentication-Results header before the MTA’s Received header. See https://github.com/trusteddomainproject/OpenDKIM/pull/126 for details. This fixes #23.