feat: use PSA crypto with mbedTLS 4

[Sped0n]

Change Overview

ESP-IDF v6 uses mbedTLS 4, where the direct mbedtls_aes_* API is no longer available. This PR keeps the existing mbedTLS AES path for older mbedTLS versions, and adds a PSA Crypto implementation for mbedTLS 4+.

Changes include:

• Detect mbedTLS version with MBEDTLS_VERSION_MAJOR.
• Use PSA Crypto for AES ECB and CBC operations when MBEDTLS_VERSION_MAJOR >= 4.
• Keep the existing mbedtls_aes_* implementation for mbedTLS 3 and older.
• Route AES-CBC call sites through the existing crypto helper instead of calling mbedtls_aes_* directly.
• Update DESFire AES authentication and MIFARE Plus AES authentication/read paths to use the compatibility helper.

[Sped0n]

more details in

• The cryptography API is now mostly the PSA API: most legacy cryptography APIs have been removed.
• In full detail, the following header files, and their former content, are no longer available.

[GOB52]

Thank you for the suggestion.
I’ll look into it.