Add negative tests for AEAD, PKCS7, PSS, DSA, DRBG, and PQ key

[JeremiahM37]

Addresses F-2195, F-2204, F-2198, F-2199, F-3072, F-3073, F-2640, F-2643, F-3074.

• AEAD bad auth tag: streaming AES-GCM decrypt final and XChaCha20-Poly1305 one-shot decrypt.
• PKCS7 SignedData with tampered signedAttribs (non-messageDigest bytes) for RSA and ECDSA signers — exercises wc_PKCS7_RsaVerify recovered-digest XMEMCMP and wc_PKCS7_EcdsaVerify res==1 guard.
• RSA PSS: constructs a signature whose recovered EM has a wrong 0xbc terminator; asserts BAD_PADDING_E specifically.
• DRBG: sets reseedCtr = WC_RESEED_INTERVAL - 1 and verifies the boundary check fires (counter resets after next generate).
• ML-KEM: flips a byte inside H(ek) of an encoded private key blob; asserts MLKEM_PUB_HASH_E.
• SLH-DSA: tampers a seed in key->sk after import; asserts wc_SlhDsaKey_CheckKey returns WC_KEY_MISMATCH_E.
• DSA: tampered hash produces answer == 0 via the final mp_cmp(r, v) check.

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #10291

No scan targets match the changed files in this PR. Review skipped.

[github-actions]

MemBrowse Memory Report

No memory changes detected for:

• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-tls12

[JeremiahM37]

Jenkins retest this please

[dgarske]

Again, very surprised this didn't propigate any errors. I sent you a note to double check things (force a failure to make sure its actually reported). For now marking approved, but holding merge since it did not change/fix any core code...