boring-sys: Bump BoringSSL to e2a57cfb4

[cjpatton]

This version includes integration of ML-DSA into TLS. Update the boring-pq and rpk patches accordingly.

While at it, run add a job to CI that runs BoringSSL's unit tests against the patched version.

[lukevalenta]

Upstream added a new field to these test structs: google/boringssl@bf6bb32

[cjpatton]

Upstream added a new field to these test structs: google/boringssl@bf6bb32

Hmm, I tried applying your suggestions, and applying the patch failed:

patching file ssl/test/runner/key_update_tests.go
patching file tool/client.cc
Applying rpk.patch
patching file include/openssl/ssl.h
Hunk #1 succeeded at 4028 (offset 1 line).
patching file ssl/ssl_credential.cc
patching file ssl/ssl_lib.cc
Hunk #1 succeeded at 3818 (offset 14 lines).
Applying underscore-wildcards.patch
patching file crypto/x509/v3_utl.cc
patch: **** malformed patch at line 63:  

patching file crypto/x509/x509_test.cc

Doesn't the patch already account for this?

[lukevalenta]

Hmm, I tried applying your suggestions, and applying the patch failed:

Whoops yeah I guess that suggested edit didn't account for line number changes in the patch, but looks like you got that part sorted! Left a comment above with how I think we can fix the remaining failing tests.