More various fixes

[gasbytes]

• cba53e3 - propage error instead of panicking in case of failure from wc_PRF_TLS
• 46d558a - propagate error instaed of panicking in sign/eddsa.rs
• 3c40c7a - add length check in ecdsa.rs before doing any slicing to parse and import ECC parameters.
• 8239b00 - propagate errors instead of panicking in key exchange impl.
• 9d531eb - wrap import_rsa_key return type in OwnedRsaKey struct to guarantee safe drop order and prevent use-after-free
• 79417c2 - propagate errors instead of panicking in the key exchange constructors by returning Result from start()
• 77f6655 - propage errors instead of panicking in aead encrypt/decrypt implementations.
• a495a03 - remove dead variant of drop with associated copy (copy + drop conflict)
• 891c0a8 - add Drop impls for sha256/384
• d7ad501 - replace remaining *.unwraps calls witch expect for diagnosable panics in trait-constrained code paths
• 804a2a8 - track cargo.lock files for reproducible builds by removing them from .gitignore
• 3c08b16 - bump rustls-webpki from 0.102 to 0.103.10
• 16cb5e5 - remove sudo from build script and install wolfSSL to OUT_DIR instead of system-wide /opt path
• f5085dc - verify sha-256 hash of downloaded wolfssl archive before extraction
• 1e2c832 - fix ownedrsakey field order to drop rsakeyobject before box, preventing use-after-free
• 0ed4a70 - use wrapper .as_ptr() instead of direct &mut borrows in FFI calls to avoid invalidating wrapper pointers