wolfBoot DICE attestation with wolfCOSE

[aidangarske]

Description

• Replace wolfBoot's hand-written DICE CBOR and COSE_Sign1 encoder with wolfCOSE.
• Use wc_CBOR_Encode* for the EAT payload and wc_CoseSign1_Sign_ex with WOLFCOSE_SIGN1_UNTAGGED for each DICE token.
• Add wolfCOSE as lib/wolfCOSE and wire it into Makefile and CMake WOLFCRYPT_TZ_PSA builds.
• Keep token sizing free of signing operations so sizing does not advance the CDI.
• Fix the STM32H5 UDS fallback to read the device UID from 0x08FFF800.
• Support software DICE with local ES256 signing and hardware DICE through the external signer callback.

Dependencies

• Add delegated signing seam wolfCOSE#59 provides delegated signing.
• Add wc_CoseSign1_Sign_ex with an untagged output option wolfCOSE#65 provides the explicit untagged Sign1 API.
• Until both merge, lib/wolfCOSE pins the temporary combined aidangarske/wolfCOSE:spe-attestation branch at 4b3ed01af2988ff67d9b55b0c64a6a35bb2bbd12.
• want to wolfcose v1.1.0 release to pin to for this

Validation

• wolfCOSE normal suite, external signing test, C99 check, and forced external signer failure test pass on the combined dependency.
• M33MU CI image ghcr.io/wolfssl/wolfboot-ci-m33mu:v1.15 passes with a 340-byte token, untagged 0x84 prefix, and PSA boot attestation: success.
• NUCLEO-H563ZI hardware passes with the same 340-byte untagged token and PSA boot attestation: success.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.