security policy: offer modern AEAD-only security policies

[jmayclin]

Problem:

s2n-tls should off a FIPS and GENERAL security policy that satisfy the following requirements

• hybridized PQ exchange
• only AEAD ciphers
• TLS 1.2 & TLS 1.3
• no SHA1 or SHA224 signatures

Note that the FIPS variant should be the same, except it won't support x25519 or CHACHAPOLY.

Need By Date:

November 1st.

Solution:

We should offer security policies that satisfy those requirements.

I did check through all of our security policies, but it's admittedly hard to audit by hand.

[jmayclin]

I would like these policies to be our defaults.