acvptool: seed key format for ML-DSA sigGen and ML-KEM decap

ACVP-Server v1.1.0.43 adds the FIPS204-tr1 and FIPS203-tr1 testing
revisions. These add a keyFormats registration property that lets an
implementation under test receive the ML-DSA sigGen private key or the
ML-KEM decapsulation key as a seed instead of in expanded form.

Test groups with keyFormat "seed" are dispatched to new module wrapper
commands, ML-DSA-XX/sigGen/seed and ML-KEM-XX/decap/seed. The seed for
ML-KEM is d followed by z, as in keyGen. Groups with expanded keys use
the existing commands unchanged.

The BoringSSL module wrapper implements the new commands with the
existing from-seed functions.

The new test bz2 vectors/expected were fetched from the NIST demo server
and the answers validated there successfully before trimming.

Change-Id: I0826c01074f1d08a15eae14b3935964f82e9a749
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/100087
SLSA-Policy-Verified: SLSA Policy Verification Service <devtools-gerritcodereview-exitgate@google.com>
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>
Reviewed-by: David Benjamin <davidben@google.com>