Harden wolfCrypt input validation and zeroization

[JeremiahM37]

Addresses F-3055, F-3056, F-1506, F-1373, F-2206, F-2655, F-1910, F-1912, F-2212, F-3059, F-3060

• Add NULL parameter validation to wc_HmacInit_Id, wc_LmsKey_ExportPubRaw, wc_CamelliaSetKey, and wc_Compress_ex/wc_DeCompress_ex.
• wc_AesGcmEncrypt: add NULL checks for iv, in/out (when sz>0), and authTag to match wc_AesGcmDecrypt.
• wc_AesEaxEncryptFinal/DecryptFinal: reject zero-length auth tag — previously bypassed authentication via ConstantCompare(.., 0).
• wc_Arc4Free and wc_Des3Free: ForceZero the key schedule before return.
• wc_hss_next_subtree_inc: ForceZero the stack-resident LMS derived seed before return.
• wc_rng_bank_init: fall through to cleanup on size error so wolfSSL_RefInit state is released.
• wc_MakeDsaKey: align tmpQ alloc/free heap hint and dynamic type to prevent static-memory free-list corruption.

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10264

Scan targets checked: wolfcrypt-bugs, wolfcrypt-src

No new issues found in the changed files. ✅

[github-actions]

MemBrowse Memory Report

gcc-arm-cortex-m4-baremetal

• FLASH: .text +64 B (+0.1%, 63,603 B / 262,144 B, total: 24% used)
  No memory changes detected for:
• gcc-arm-cortex-m4- gcc-arm-cortex-m4-min-ecc- gcc-arm-cortex-m4-tls12

[JeremiahM37]

Jenkins retest this please