Add CNSA presets

[krish2718]

CNSA supersedes NSA SuiteB crypto suites, esp. brings back RSA with higher modulus (>=3072). This was based on RFC9151, see [1].

Implements #4602.

[1] - https://datatracker.ietf.org/doc/rfc9151/

Upstream PR: Mbed-TLS/mbedtls#9460

Description

Please write a few sentences describing the overall goals of the pull request's commits.

PR checklist

Please tick as appropriate and edit the reasons (e.g.: "backport: not needed because this is a new feature")

• changelog provided, or not required
• 3.6 backport done, or not required
• 2.28 backport done, or not required
• tests provided, or not required

Notes for the submitter

Please refer to the contributing guidelines, especially the
checklist for PR contributors.

Help make review efficient:

• Multiple simple commits
  • please structure your PR into a series of small commits, each of which does one thing
• Avoid force-push
  • please do not force-push to update your PR - just add new commit(s)
• See our Guidelines for Contributors for more details about the review process.

[tomi-font]

I think I'd rather have you address the comments you have received on your upstream PR. We always strive to do upstream first, and in this repo only apply cherry picks or patches incompatible with upstream.
By the way you can clean up the PR description, the template happens to be inherited by the upstream Mbed TLS repository.