wolfBoot DICE attestation with wolfCOSE

[aidangarske]

Description

• Replace wolfBoot's hand-rolled DICE CBOR + COSE_Sign1 encoder with wolfCOSE (wc_CBOR_Encode* for the EAT payload, wc_CoseSign1_Sign for the token)
• Add wolfCOSE as a submodule at lib/wolfCOSE; wire it into both the Makefile and CMake WOLFCRYPT_TZ_PSA build paths
• Size query computes the exact untagged length without signing (no crypto / no CDI advance while sizing)
• Fix hal/stm32h5.c uds_from_uid reading a non-existent BSEC address (0x46009014, secure-world bus fault) → read the real STM32H5 unique ID at 0x08FFF800 (RM0481); this unblocks DICE on the H5
• Supports SW-DICE (SetEcc + local ES256 sign) and HW-DICE (SetExtSigner → hal_dice_sign_hash); untagged output (0x84) stays byte-compatible with the app_mcxn.c consumer
• Verified on NUCLEO-H563ZI: real 340-byte untagged COSE_Sign1 EAT, PSA boot attestation: success
• Follow-up: in-repo unit test for wolfBoot_dice_get_token[_size] (interim coverage: host test proves size-preflight == token length across payloads; HW token decodes + verifies) ???
• Depends on wolfCOSE PR Add delegated signing seam wolfCOSE#59 (ext-sign) + WOLFCOSE_SIGN1_UNTAGGED (→ v1.1); lib/wolfCOSE pinned to aidangarske/wolfCOSE@spe-attestation for now

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.