[codex] add WebCrypto Argon2 KDF support

[andrewtdiz]

Summary

• add WebCrypto raw-secret import support for Argon2d, Argon2i, and Argon2id keys
• implement Argon2 deriveBits/deriveKey handling with nonce, memory, passes, parallelism, version, associatedData, and secretValue params
• update CryptoKey runtime metadata IDs and usages so the added KDF algorithms do not collide with existing EC, Ed25519, X25519, and RSA keys
• add a Node parity fixture covering support probes, deterministic Argon2 vectors, derived AES keys, and validation errors

Validation

• PERRY_NO_AUTO_OPTIMIZE=1 CARGO_TARGET_DIR=/root/perry-worktrees/.build-targets/perry-webcrypto-argon2-baseline npm exec --yes --package=node@26 -- bash -lc './run_parity_tests.sh --suite node-suite --module crypto --filter argon2-kdf'
• PERRY_NO_AUTO_OPTIMIZE=1 CARGO_TARGET_DIR=/root/perry-worktrees/.build-targets/perry-webcrypto-argon2-baseline npm exec --yes --package=node@26 -- bash -lc './run_parity_tests.sh --suite node-suite --module crypto --filter jwk-ecdh-p256'
• PERRY_NO_AUTO_OPTIMIZE=1 CARGO_TARGET_DIR=/root/perry-worktrees/.build-targets/perry-webcrypto-argon2-baseline npm exec --yes --package=node@26 -- bash -lc './run_parity_tests.sh --suite node-suite --module crypto --filter webcrypto' (54 pass / 2 known adjacent parity fails: cryptokey-usages-extractable, jwk-wrap-unwrap; covered by [codex] align WebCrypto non-extractable key errors #4302)
• CARGO_TARGET_DIR=/root/perry-worktrees/.build-targets/perry-webcrypto-argon2-check cargo check -p perry-stdlib --no-default-features --features crypto
• cargo fmt --all -- --check
• git diff --check
• ./scripts/check_file_size.sh

Refs #2518