Drop Python 3.8 from CI or pin cryptography version for 3.8

[RyAuld]

Summary

Python 3.8 reached EOL in October 2024. The \cryptography\ package has dropped Python 3.8 support, so \pip install cryptography\ on 3.8 installs an older version that no longer matches the latest PyPI release.

This causes \ est_should_be_run_with_latest_version_of_cryptography\ to fail on the Python 3.8 CI job.

Options

1. Drop Python 3.8 from CI matrix — it's EOL and no longer receiving security patches.
2. Skip the cryptography version check on Python 3.8 — allow the test to pass on older runtimes.
3. Pin a compatible cryptography version for 3.8 — if continued 3.8 support is needed.

Related

• Issue Bump cryptography version ceiling from <50 to <51 in setup.cfg #914 — bump cryptography ceiling in setup.cfg