Add support for ML-DSA

[bifurcation]

This PR is a first step toward ML-DSA support, as discussed in #8. It puts in place enough of the basic algebraic and encoding primitives to get key generation going.

Still TODO:

• More complete unit test coverage (e.g., on encoding routines)
• Signing
• Verification
• Integration tests against NIST ACVP test vectors
• Performance benchmarks
• Pull out things that are common with ML-KEM into a shared module (?)

@tarcieri - This is currently blocked on typenum not having enough integers. Specifically, there is no ArraySize implementation for U4896, which the compiler says is necessary for MlDsa87. Can we get that added?

@cothan, @marija-mijailovic - If you guys are still interested in collaborating, making PRs to this branch would be a good way to help.

On the latter point about overlap with ML-KEM: Thinking about this while I was writing this PR, it seems like the main shared stuff would be:

• Structs for polynomials, polynomial vectors, NTT vectors, and NTT matrices
• Fixed-width encoding of unsigned integers

Getting those factored out would be a non-trivial savings, but would require some careful introduction of generics. For example, the algebraic stuff would have to be generic over the field over which the polynomials exist (since there are different q moduli in the two algorithms), as well as the details of multiplication of polynomials and NTT.

[tarcieri]

@bifurcation sure. Here's an example PR to add more sizes: RustCrypto/hybrid-array#104

Note that the uint! macro uses a little endian bit encoding for the size

[bifurcation]

Latest push adds signing/verification logic. It can verify its own signatures, but fails the ACVP test vectors.

Note that it will not build against the public version of hybrid-array, since that is missing some ArraySize implementations. I'm planning to submit a PR to that repo once things are in basic working order here, so that we have confidence that we've covered all the necessary integers.

[bifurcation]

Thanksgiving update 🦃: Now passing ACVP tests, working on cleanup.

[bifurcation]

@tarcieri - I think this is about ready for review and merging, though the CI won't succeed until RustCrypto/hybrid-array#108 is merged and there's a new release. What are the next steps here?

[tarcieri]

@bifurcation new sizes released in hybrid-array v0.2.3

[bifurcation]

OK, this is ready for review.

@tarcieri looks like the SLH-DSA build is broken at the moment.

[tarcieri]

@bifurcation slh-dsa build is fixed if you can rebase

[bifurcation]

@tarcieri - CI is green. What do you think about review?

[tarcieri]

@bifurcation sorry, have a huge backlog of PRs and haven't been reviewing as much lately. Will try to look this weekend