Add ML-KEM support (keygen/encaps/decaps, DMA/non-DMA, tests, benchmark)

[Frauschi]

Summary

• add ML-KEM core support for key generation, encapsulation, and decapsulation
• support both non-DMA and DMA request paths in client/server crypto handling
• add wolfCrypt crypto callback integration for ML-KEM PK operations
• add ML-KEM unit tests (all enabled levels) for non-DMA and DMA flows
• add benchmark module coverage for ML-KEM-512/768/1024 keygen/encaps/decaps (DMA and non-DMA)

Notes

• local implementation plan file remains untracked and is not part of this PR

Validation

• targeted object builds for touched units pass
• full test/benchmark links in this environment still show pre-existing ASAN/DMA link issues unrelated to the new ML-KEM logic