crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints [CVE-2024-45341] [1.22 backport]

[gopherbot]

@neild requested issue #71156 to be considered for backport to the next 1.22 minor release.

@gopherbot please open backport issues for 1.22, 1.23, and 1.24

[gopherbot]

Change https://go.dev/cl/643105 mentions this issue: [release-branch.go1.22] crypto/x509: properly check for IPv6 hosts in URIs

[gopherbot]

Closed by merging CL 643105 (commit 19d2103) to release-branch.go1.22.