crypto/tls: revert Config.Clone change and apply lightweight chain validation [1.25 backport]

[gopherbot]

@rolandshoemaker requested issue #77354 to be considered for backport to the next 1.25 minor release.

@gopherbot please open backport issues for 1.24, 1.25, and 1.26.

[gopherbot]

Change https://go.dev/cl/740063 mentions this issue: [release-branch.go1.25] Revert "crypto/tls: don't copy auto-rotated session ticket keys in Config.Clone"

[gopherbot]

Change https://go.dev/cl/740064 mentions this issue: [release-branch.go1.25] crypto/tls: add verifiedChains expiration checking during resumption

[gopherbot]

Change https://go.dev/cl/740065 mentions this issue: [release-branch.go1.25] crypto/tls: check verifiedChains roots when resuming sessions

[gopherbot]

Closed by merging CL 740064 (commit c2d04c0) to release-branch.go1.25.

[gopherbot]

Closed by merging CL 740065 (commit d5987bf) to release-branch.go1.25.