crypto: default ML-KEM and ML-DSA pkcs8 export to seed-only format

[panva]

Configure OpenSSL provider parameters to prefer seed-only format when exporting ML-KEM and ML-DSA private keys that contain a seed. Keys without a seed continue to use the private-only format.

The both format will likely not be supported by BoringSSL and Web Cryptography at all and is overall the better format.

[nodejs-github-bot]

Review requested:

• @nodejs/crypto

[panva]

cc @nodejs/tsc I would like to get this in for v26.x

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.65%. Comparing base (ae228c1) to head (a6d312b).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #62178      +/-   ##
==========================================
- Coverage   89.65%   89.65%   -0.01%     
==========================================
  Files         676      676              
  Lines      206546   206553       +7     
  Branches    39558    39549       -9     
==========================================
- Hits       185179   185176       -3     
+ Misses      13485    13483       -2     
- Partials     7882     7894      +12     

Files with missing lines	Coverage Δ
src/crypto/crypto_util.cc	72.81% <100.00%> (-0.03%)	⬇️

... and 33 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/71657/