Update CRT submodules to latest releases

[dannycjones]

Description of change

Pull in the latest CRT libraries.

Notably, includes awslabs/aws-c-auth#244.

Submodule mountpoint-s3-crt-sys/crt/aws-c-auth 53a31bac..300ae823:
  > Support "external_id" in config file, for STS AssumeRole (#244)
  > Update MacOS to arm64 (#243)
  > clang-format 18 (#242)
  > Ecforce ECS Credentials Provider IP Rules (#238)
Submodule mountpoint-s3-crt-sys/crt/aws-c-cal 71810b1a..bc0d71b6:
  > Revert "Revert "Implement runtime check on libcrypto linkage (#186)" (#195)
  >   fix FreeBSD CI to install default python packages (#193)
  > CI for AWS-LC-FIPS (#192)
Submodule mountpoint-s3-crt-sys/crt/aws-c-common 6d974f92..67601bbb:
  > Bump the minimum stack size to at least 1MB (#1139)
  > Update builder to fix macos arm64 CI (#1137)
  > Update MacOS CI to Arm64 (#1136)
  > Fix out variable in cmake sanitizer module (#1134)
  > fix FreeBSD CI to install default python packages (#1133)
Submodule mountpoint-s3-crt-sys/crt/aws-c-http 652e2feb..a2fb16c4:
  > adapt change from "TLS deliver buffer data during shutdown" (#474)
  > update stale issue bot permissions (#478)
  > Update MacOS to arm64 (#476)
  >  Mark the network interface API experimental (#475)
Submodule mountpoint-s3-crt-sys/crt/aws-c-io d04508d1..e455d903:
  > Fix undefined type enum aws_tls_handler_state in secure_channel_tls_h… (#663)
  > TLS deliver buffer data during shutdown (#650)
  > remove uv headers from CMakeLists.txt (#660)
  > Update MacOS CI (#658)
  > Fix import of inttype (#656)
  > Mark the network interface API internal (#654)
Submodule mountpoint-s3-crt-sys/crt/aws-c-s3 94edd474..0ab4d58e:
  > Make options more const (#445)
  > Mark the network interface API experimental (#447)
Submodule mountpoint-s3-crt-sys/crt/aws-lc 05d3bfd6..47333e18:
  > Prepare release v1.32.0 (#1700)
  > Fix Windows/ARM64 assembly build (#1697)
  > Upstream: Add Intel Indirect Branch Tracking support (#1659)
  > Add test to ensure sequence numbers are allowed to increase by more than one (#1667)
  > AES-GCM AArch64: Store swapped Htable values (#1403)
  > add ECPKParameters_print as no-op (#1686)
  > Add support for parsing ECPKParameter PEM files (#1670)
  > Update tcpdump integ test (#1699)
  > Update patch for tpm2-tss (#1698)
  > Add CI script to build and test ACCP (#1684)
  > Set ret to NULL before return in EC_POINT_bn2point (#1692)
  > Remove dead tail code from (non-SHA3) AES-GCM AArch64 kernel (#1639)
  > ec_nistp table generation for scalar multiplication (#1669)
  > Improve gcc-4.8 support/testing (#1665)
  > add support for EC_POINT_bn2point (#1645)
  > Add initial x509 tool (#1666)
  > extend ec2-test-framework instance timeout (#1688)
  > Remove source patches for python main integration test (#1681)
  > Add EC seed functions as deprecated no-ops (#1674)
  > Update HMAC to fail when null value is passed to out parameter (#1662)
Submodule mountpoint-s3-crt-sys/crt/s2n-tls 073c7b41..138e3ece:
  > chore: Bump Rust bindings v1.4.18 (#4656)
  > fix: Removing new usage of memcmp (#4657)
  > Merge commit from fork
  > Update s2n_connection_get_kem_group_name() to work with ClientHelloRe… (#4652)
  > fix: avoid cert validation on connection_set_config (#4612)
  > ci: add merge_group event to GHA workflow. (#4646)
  > feat: Add API to gate session tickets to TLS1.3 only (#4645)
  > feature: reusable fingerprinting interface (#4628)
  > refactor(bindings/s2n-tls): finish test harness refactor (#4636)
  > test(pcap): handle pcaps with tcp fragmentation (#4643)
  > Refactor: change is_available return type to bool in s2n_cipher struct (#4630)
  > Refactor: change init and destroy_key return type to S2N_RESULT in s2n_cipher struct (#4639)
  > Refactor: change set/get_decryption_key return type to S2N_RESULT in s2n_cipher struct (#4638)
  > chore: document why SHA1 is the only supported hash algorithm for cert_id generation in OCSP response (#4625)
  > ci(nix): Add tshark to nix devshell (#4571)
  > refactor: use feature probe for AEAD gate logic instead of AWS-LC/BoringSSL macros (#4642)
  > api(bindings/s2n-tls)!: remove public testing feature (#4623)
  > chore(bindings): release 0.2.8 (#4635)
  > feat(bindings/s2n-tls): add client_hello_version (#4609)
  > fix: remove S2N_NO_PQ option (#4622)
  > chore: fix CBMC proof summary count (#4627)
  > refactor: separate out ja3 specific logic (#4578)

Relevant issues: N/A

Does this change impact existing behavior?

No breaking changes.

---

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and I agree to the terms of the Developer Certificate of Origin (DCO).

[monthonk]

LGTM