CLSA-2025-1764696522 libssh: Fix of 2 CVEs

CVE-2025-5372: fix inconsistent return value interpretation in sshkdf function to prevent uninitialized key buffers leading to SSH session compromise - CVE-2025-5987: fix missing error detection in ChaCha20 initialization that could leave cipher context partially uninitialized...