cryptsetup: update to 2.8.6

cryptsetup: update to 2.8.6

Stable bug-fix release. All users of cryptsetup 2.8.x must upgrade.

Changes since 2.8.4:
 * Fix FileVault (fvault2) metadata parsing crash with crafted images.
   Reported by David Pokora (Trail of Bits/Anthropic).
 * Fix reading FileVault image metadata from incorrect image offset.
 * OpenSSL backend: increase the number of allowed threads to 64
   (workaround for parallel Argon2 PBKDF deadlock).
 * Fix LUKS2 reencryption lock name when the device is being reencrypted.
 * Check UUID of the resumed device to match UUID stored in metadata.
 * Add a specific error for failed detached header allocation.
 * Fix tests not to use aes-generic kernel cipher name (Linux 7.0+).
 * Fix OpenSSL crypto backend if built with LibreSSL.
 * Several compatibility fixes to the alternative Meson configuration.
 * Various code fixes based on AI-assisted reviews (memory wiping,
   error paths, integrity sector overflow, device-mapper flags, ...).

Link: https://gitlab.com/cryptsetup/cryptsetup/-/blob/v2.8.6/docs/v2.8.6-ReleaseNotes
Signed-off-by: Daniel Golle <redacted>