Implement FIPS shimming for wc_AesGcmEncrypt():

wolfssl/wolfcrypt/aes.h: if HAVE_FIPS && !WC_FIPS_AESGCM_ONE_SHOT_EXT_IV_ALLOWED, make wc_AesGcmEncrypt() a WOLFSSL_LOCAL, and if !_WC_BUILDING_AES_C, add a WC_DEPRECATED() attribute to it.

wolfssl/wolfcrypt/wc_compat.h, wolfssl/wolfcrypt/include.am, .wolfssl_known_macro_extras: add wc_compat.h: when HAVE_FIPS and !WC_FIPS_AESGCM_ONE_SHOT_EXT_IV_ALLOWED, shim wc_AesGcmEncrypt() to remap it to FIPS-allowed APIs.

wolfssl/wolfcrypt/types.h: at the end, #ifndef BUILDING_WOLFSSL, #include <wolfssl/wolfcrypt/wc_compat.h>, to assure transparent shimming of wc_AesGcmEncrypt() for all outside callers.

wolfcrypt/src/evp.c, wolfcrypt/src/hpke.c, wolfcrypt/src/pkcs7.c, wolfcrypt/benchmark/benchmark.c, wolfcrypt/test/test.c, wolfssl/ssl.h: #include <wolfssl/wolfcrypt/wc_compat.h> to shim in-library/in-module calls to wc_AesGcmEncrypt().

src/internal.c: in TicketEncDec(), add const attributes to constable input args, and fix swapped out/in in calls to wc_AesGcmEncrypt().

tests/api/test_aes.c: in test_wc_AesGcmEncryptDecrypt(), skip longIV test if WC_TEST_AES_GCM_ENCRYPT_NO_NONSTD_IV (defined by wc_compat.h when needed).

wolfssl/wolfcrypt/error-crypt.h, wolfssl/error-ssl.h, wolfcrypt/src/error.c, src/internal.c:

• add FIPS_WRONG_API_E;
• put several error codes back into sequence in wc_GetErrorString() switch().
• move wc_static_assert()s from headers to corresponding .c files, to eliminate dependency on wolfcrypt/types.h;
• remove unneeded #include <wolfssl/wolfcrypt/types.h> from error-crypt.h.

linuxkm/lkcapi_aes_glue.c: in the inner streaming loops for AES-GCM and AES-XTS (AesGcmCrypt_1(), km_AesXtsEncrypt(), and km_AesXtsDecrypt()), bypass FIPS wrappers to avoid frivolous overhead, with decisive check after looping by the Final function.

wolfcrypt/src/aes.c: revert atomic refactor of checkedAESNI, haveAESNI, and intel_flags (3f3ebca / #10871) to avoid frivolous atomic access overhead. Also use regular int, not cpuid_flags_atomic_t, for cpuid_flags in the WOLFSSL_ARMASM path, and similarly use a regular int for aes_ppc64_use_crypto in the WOLFSSL_PPC64_ASM_CRYPTO path.

wolfssl/wolfcrypt/wc_compat.h, wolfssl/wolfcrypt/fips_test.h, .wolfssl_known_macro_extras:

• also inhibit recursive evaluation midway through random.h, fips.h, and fips_test.h (circular dependencies).
• add WC_FIPS_ENUM_CAST_ID_DEFINED to allow detection of fips_test.h incomplete evaluation.

wolfcrypt/src/ed25519.c, tests/api/test_ed25519.c:

• add missing null key checks to wc_ed25519_verify_msg_init(), wc_ed25519_verify_msg_update(), and wc_ed25519_verify_msg_final().
• add WC_ARG_NOT_NULL() attributes to args of static functions as appropriate.
• add FIPS >v6 gates to new null key tests and a new invalid hash size test in test_wc_ed25519_sign_verify_ctx_ph() and test_wc_ed25519_verify_streaming().

configure.ac: add --enable-all-quantum-crypto "Enable all quantum-resistant asymmetric algorithms (default: disabled)".

tested in conjunction with FIPS 20260508-wrapper-signature-harmony and WolfGuard 20260713-wc_AesGcmEncrypt_fips using

wolfssl-multi-test.sh ...
pr-check
check-source-text-fips-dev

quantum-safe-wolfssl-all-crypto-only-intelasm-fips-dev-linuxkm-next-insmod-gcc-latest
quantum-safe-wolfssl-all-crypto-only-noasm-fips-dev-linuxkm-next-clang-tidy
quantum-safe-wolfssl-all-crypto-only-intelasm-sp-asm-sp-linuxkm-next-insmod
quantum-safe-sanitizer-all-crypto-intelasm-c-fallback-fuzzer

fips-140-3-optest-acvp-defaults
fips-140-3-pilot-optest-acvp-sp-asm
fips-140-3-optest-acvp-defaults
fips-140-2-optest
fips-140-2-openssl-all
fips-140-2-wolfrand-defaults
fips-140-3-v5-ready-optest-acvp-intelasm
fips-140-3-v6-optest-acvp-sp-asm
fips-140-3-dev-optest-acvp-sp-asm-gcc-latest
fips-140-3-v6-optest-acvp-sp-asm
fips-140-3-optest-acvp-sp-asm
fips-140-3-dev-optest-acvp-sp-noasm
fips-140-3-all

linuxkm-defaults-all-fips-v6-sanitizer
linuxkm-defaults-all-quantum-safe-fips-dev-gcc-latest
linuxkm-defaults-all-fips-dev-sanitizer

cross-armv7a-armasm-fips-140-3-dev-sp-all-testsuite-sanitizer
cross-aarch64-armasm-fips-140-3-dev-all-unittest
cross-powerpc64-all-asm

defaults-cryptonly-Wconversion-intelasm-build
defaults-cryptonly-Wconversion-intelasm-fips-140-3-dev-build
allcryptonly-Wconversion-intelasm-build

linuxkm-benchmarks-asm-insmod
linuxkm-benchmarks-fips-insmod
linuxkm-fips-v6-dist-insmod-cust-kernel-2
linuxkm-fips-v5-strict-dist-insmod-cust-kernel-2-amdrdseed
linuxkm-fips-dev-dist-insmod-cust-kernel-2-amdrdseed
'.*cust-kernel-3.*'