Test graviola in CI

[CathalMullan]

Opening as a draft for now, since none of these jobs will actually pass:

• x86_64 needs the rustc fix
• aarch64 needs added intrinsics

valgrind is needed due to crabgrind usage: https://github.com/ctz/graviola/blob/v/0.3.2/graviola/src/low/ct.rs#L5

Could consider patching it out, or making it optional upstream.

[CathalMullan]

Opted to patch out crabgrind to avoid needing valgrind in CI.
Also had to bump AWS-LC to avoid needing cmake.

[rustbot]

This PR was rebased onto a different main commit. Here's a range-diff highlighting what actually changed.

Rebasing is a normal part of keeping PRs up to date, so no action is needed—this note is just to help reviewers.

[bjorn3]

Would you mind disabling the new tests on Windows? They are the slowest CI jobs.

[CathalMullan]

Skipping the graviola tests on Windows saved around 3 minutes.
Probably better off splitting the sysroot tests into separate jobs?

[bjorn3]

Thanks!

Splitting the sysroot tests into separate jobs would increase the amount of concurrent jobs that are used, which probably slows down the start of them when pushing a couple of commits in relatively quick succession, which I sometimes do.