Add libacvp PQC test coverage

[aidangarske]

• Adds wolfProvider integration coverage to pinned libacvp v2.3.1.
• Exercises ML-KEM 512, 768, and 1024.
• Exercises ML-DSA 44, 65, and 87.
• Exercises SLH-DSA SHA2-128f.
• Corrects two ML-KEM output-size queries in the OpenSSL adapter.
• Supports normal and force-fail provider-routing tests.
• Passes all eight wolfProvider CI matrix configurations.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[padelsbach]

@aidangarske, looking a bit closer, I think this is an issue in wolfprovider.

Commit e44edc66 made this change to deviate from OpenSSL, making WP more strict:

-    /* Size-only query: out == NULL with outLen/secretLen set per OpenSSL
-     * KEM encapsulate contract. Mixed-NULL is a caller bug, not a size
-     * query, so reject it explicitly. */
-    if (out == NULL) {
+    /* Size-only query: both output buffers NULL. A mixed-NULL request (one
+     * buffer NULL, the other not) is a caller bug, not a size query. */
+    if ((out == NULL) && (secret == NULL)) {

Can you add a test case in wolfprovider EVP_PKEY_encapsulate and _decapsulate? Should confirm that WP is off.

needs more investigation in WP vs OSSL

[padelsbach]

LGTM, let's first merge wolfSSL/wolfProvider#458