Backport TLS13-KDF to 1.24 go release branch

To avoid waiting for the 1.25 release of microsoft/go, we would like to backport https://github.com/golang-fips/openssl/pull/272 into the 1.24 release branch. The first step is to backport to the release branch in this repo.

Relevant discussion starting here: https://github.com/microsoft/go/issues/1626#issuecomment-2840070155

Backport PR: https://github.com/golang-fips/openssl/pull/276