libp11: update to 0.4.20

libp11: update to 0.4.20

0.4.19:
- added native KEYMGMT, SIGNATURE and ASYM_CIPHER operations to the
  PKCS#11 provider, enabling OpenSSL 4.x support and improving RSA
  interoperability
- added support for ML-DSA, SLH-DSA and FALCON key generation, signing
  and verification; PQC key generation examples and provider tests
- added PKCS#11 provider support for ECDH, X25519 and X448 key exchange,
  including X25519/X448 key generation
- improved Ed25519/Ed448 public-key resolution with certificate fallback
- fixed use-after-free crashes after enumerating additional PKCS#11 keys
- fixed a potential out-of-bounds write while parsing PKCS#11 URI
  attributes
- fixed PKCS#11 session, attribute and key-reference leaks

0.4.20:
- added PKCS#11 3.2 interface discovery and updated the bundled header
  to version 3.2
- added PKCS#11 provider support for ML-KEM-512/768/1024 key generation,
  encapsulation and decapsulation
- added PKCS11_evp_pkey_decapsulate() API
- added provider signature AlgorithmIdentifier support, including
  RSA-PSS parameters and correct default salt length handling
- fixed RSA-PSS salt length parsing and spurious OpenSSL errors
- fixed session-pool races and deadlocks during concurrent key
  generation and cryptographic operations
- fixed key-cache and OpenSSL 1.x RSA object use-after-free bugs
- fixed provider EC parameter lifetime handling and resource leaks
  during EC, RSA, EdDSA and XDH operations and context cleanup
- fixed installation of p11_ver.h, required by p11_err.h

Signed-off-by: Daniel Golle <redacted>