Fixes for TrustX509 issuer lookup, JNI callbacks, session cache save

[cconlon]

This PR includes 5 Fenrir fixes:

• F-3917: memsaveSessionCache() only copies to the caller's array on success and within the caller-supplied size
• F-9131: findIssuerBySignature() skips non-CA KeyStore entries unless trusted peer certs are enabled, matching CertManagerLoadCAKeyStore()
• F-9134: verifyHostnameByType() frees its WolfSSLCertificate on every exit path
• F-10766: MAC/encrypt callback builds the encIn ByteBuffer from encIn instead of encOut
• F-10768: PSK callbacks zero the Java key array once native code has copied the key

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #428

Scan targets checked: wolfssljni-src, wolfssljni-bugs
Coverage: 3 of 9 in-scope changed file(s) opened by the reviewer; not opened: src/java/com/wolfssl/WolfSSLPskClientCallback.java, src/java/com/wolfssl/WolfSSLPskServerCallback.java, src/test/com/wolfssl/provider/jsse/test/WolfSSLParametersPskTest.java, src/test/com/wolfssl/provider/jsse/test/WolfSSLTestFactory.java, src/test/com/wolfssl/provider/jsse/test/WolfSSLTrustX509Test.java, src/test/com/wolfssl/test/WolfSSLTest.java

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

Review tier: Lite