Fixes for JNI size checks, session buffer zeroing, freed X509 CA check

[cconlon]

This PR includes 4 Fenrir fixes:

• F-12701: Zero the serialized session buffer in sessionToDerNative before freeing
• F-13502: Reject out-of-range setTmpDH sizes before allocating
• F-13503: Report a freed WolfSSLX509 as not a CA
• F-13505: Bound dtlsCidParseNative message size by the array length

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[wolfSSL-Fenrir-bot]

Fenrir Automated Review — PR #430

Scan targets checked: wolfssljni-src, wolfssljni-bugs
Coverage: 3 of 9 in-scope changed file(s) opened by the reviewer; not opened: src/java/com/wolfssl/WolfSSLContext.java, src/java/com/wolfssl/WolfSSLSession.java, src/test/com/wolfssl/provider/jsse/test/WolfSSLX509Test.java, src/test/com/wolfssl/test/WolfSSLContextTest.java, src/test/com/wolfssl/test/WolfSSLSessionTest.java, src/test/com/wolfssl/test/WolfSSLTestCommon.java

Fenrir result: Approved ✅

No new issues found in the changed files.

Advisory only — this automated result does not count as a GitHub approval.

Review tier: Lite