LibreSSL 4.4 ships post-quantum TLS and security fixes

LibreSSL 4.4 is out as the first stable release of the 4.4.x series and is included in OpenBSD 8.0. libtls now prefers the hybrid X25519MLKEM768 key exchange for TLS 1.3, the eMudhra emSign ECC Root CA G3 certificate is removed, and an OCSP responder authorization bypass is fixed.

• libtls prefers X25519MLKEM768 for TLS 1.3
• eMudhra emSign ECC Root CA G3 removed from bundle
• OCSP authorization bypass with muststaple fixed
• Adds macOS 27 builds and ARM64, RISC-V optimizations