RFR: Merge jdk8u:master

[Andrew John Hughes]

Merge jdk8u452-b06

GHA builds will not work until [JDK-8293107](https://bugs.openjdk.org/browse/JDK-8293107) is merged in 8u462-b01

-------------

Commit messages:
 - Merge jdk8u452-b06
 - 8347965: (tz) Update Timezone Data to 2025a
 - 8346587: Distrust TLS server certificates anchored by Camerfirma Root CAs
 - 8339560: Unaddressed comments during code review of JDK-8337664

The merge commit only contains trivial merges, so no merge-specific webrevs have been generated.

Changes: https://git.openjdk.org/shenandoah-jdk8u/pull/95/files
  Stats: 1826 lines in 59 files changed: 1091 ins; 638 del; 97 mod
  Patch: https://git.openjdk.org/shenandoah-jdk8u/pull/95.diff
  Fetch: git fetch https://git.openjdk.org/shenandoah-jdk8u.git pull/95/head:pull/95

PR: https://git.openjdk.org/shenandoah-jdk8u/pull/95