RFR: 8347938: Switch to latest ML-KEM private key encoding [v2]

[Weijun Wang]

> The private key encoding formats of ML-KEM and ML-DSA are updated to match the latest IETF drafts at: https://datatracker.ietf.org/doc/html/draft-ietf-lamps-dilithium-certificates-08 and https://datatracker.ietf.org/doc/html/draft-ietf-lamps-kyber-certificates-10. New security/system properties are introduced to determine which CHOICE a private key is encoded.
> 
> Both the encoding and the expanded format are stored inside a `NamedPKCS8Key` now. When loading from a PKCS #8 key, the expanded format is either calculated or copied from the input.

Weijun Wang has updated the pull request incrementally with one additional commit since the last revision:

  safer privKeyToPubKey; updated desciptions for the properties; adding braces to if blocks

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/24969/files
  - new: https://git.openjdk.org/jdk/pull/24969/files/67e9752a..1adbad42

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=24969&range=01
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=24969&range=00-01

  Stats: 61 lines in 5 files changed: 33 ins; 1 del; 27 mod
  Patch: https://git.openjdk.org/jdk/pull/24969.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/24969/head:pull/24969

PR: https://git.openjdk.org/jdk/pull/24969