Add ML-DSA-65 support

[RankoR]

No description provided.

[chenxiaolong]

Out of curiosity, have you been able to successfully register an ML-DSA-65 key with avb_custom_key on the Pixel 11 series?

I got a couple reports (in an unrelated project) where the bootloader rejects ML-DSA public keys with:

Writing 'avb_custom_key'                           (bootloader) avb custom key: flash failed
FAILED (remote: 'failed to flash partition (avb_custom_key): -1')

but RSA public keys still work fine. It seems to only affect fastboot flash avb_custom_key. The bootloader is happy with an RSA-signed vbmeta that uses AVB chain descriptors to verify other ML-DSA-signed partitions.

Seems there might be a bootloader bug in these new devices.