Rename wolfssl-versions.yml -> wolfssl-versions-pqc.yml

Make it explicit that this matrix is PQC-only. Other wolfTPM workflows
(fwtpm-test.yml, make-test-swtpm.yml, pqc-examples.yml) already cover
core wolfTPM build/test against wolfSSL master.

Author: aidangarske

.github/workflows/wolfssl-versions.yml …ithub/workflows/wolfssl-versions-pqc.yml.github/workflows/wolfssl-versions.yml renamed to .github/workflows/wolfssl-versions-pqc.yml .github/workflows/wolfssl-versions.yml renamed to .github/workflows/wolfssl-versions-pqc.yml

@@ -21,22 +21,12 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          # v5.8.x: needs version-gated workarounds in fwtpm_crypto.c for
-          # (a) non-const wc_RsaPSS_VerifyCheck (v5.8.0 only) and
-          # (b) Decapsulate not computing H from seed-derived keys (all v5.8.x).
+          # Lowest supported: exercises all version-gated workarounds in
+          # fwtpm_crypto.c (RSA cast, H-set, wc_ForceZero shim).
           - wolfssl-version: 'v5.8.0-stable'
             wolfssl-ref: 'v5.8.0-stable'
             cache-key: 'wolfssl-pqc-v5.8.0-v1'
-          - wolfssl-version: 'v5.8.2-stable'
-            wolfssl-ref: 'v5.8.2-stable'
-            cache-key: 'wolfssl-pqc-v5.8.2-v1'
-          - wolfssl-version: 'v5.8.4-stable'
-            wolfssl-ref: 'v5.8.4-stable'
-            cache-key: 'wolfssl-pqc-v5.8.4-v1'
-          # v5.9.0+: H-set fix landed; workaround is skipped via VERSION_HEX gate.
-          - wolfssl-version: 'v5.9.0-stable'
-            wolfssl-ref: 'v5.9.0-stable'
-            cache-key: 'wolfssl-pqc-v5.9.0-v1'
+          # Latest stable: workarounds gated off via VERSION_HEX.
           - wolfssl-version: 'v5.9.1-stable'
             wolfssl-ref: 'v5.9.1-stable'
             cache-key: 'wolfssl-pqc-v5.9.1-v1'