crypto/x509: ExtKeyUsageAny bypasses policy validation [1.24 backport]

[gopherbot]

@rolandshoemaker requested issue #73612 to be considered for backport to the next 1.24 minor release.

@gopherbot please backport issue for Go 1.24.

[gopherbot]

Change https://go.dev/cl/672316 mentions this issue: [release-branch.go1.24] crypto/x509: decouple key usage and policy validation

[mknyszek]

FYI, today is the last chance to land changes for the next minor release. The backport still needs review -- once reviewed I can submit. @FiloSottile @rolandshoemaker

[gopherbot]

Closed by merging CL 672316 (commit 03811ab) to release-branch.go1.24.