crypto/tls: revert Config.Clone change and apply lightweight chain validation [1.26 backport]

[gopherbot]

@rolandshoemaker requested issue #77354 to be considered for backport to the next 1.26 minor release.

@gopherbot please open backport issues for 1.24, 1.25, and 1.26.

[gopherbot]

Change https://go.dev/cl/740004 mentions this issue: [release-branch.go1.26] crypto/tls: check verifiedChains roots when resuming sessions

[gopherbot]

Change https://go.dev/cl/740002 mentions this issue: [release-branch.go1.26] Revert "crypto/tls: don't copy auto-rotated session ticket keys in Config.Clone"

[gopherbot]

Change https://go.dev/cl/740003 mentions this issue: [release-branch.go1.26] crypto/tls: add verifiedChains expiration checking during resumption

[gopherbot]

Closed by merging CL 740002 (commit a1d9a25) to release-branch.go1.26.