feat(java): extend Google Tink detection with Mac, Hybrid and Signature primitives

[Chennamma-Hotkar]

Summary

Follow-up to #406 (Tink AEAD detection rules). Extends Google Tink
coverage to three additional cryptographic primitives: MAC, hybrid
encryption, and digital signatures — each with key generation detection
and depending rules for the full operation surface.

Architecture

Each primitive follows the same pattern:

1. KeysetHandle.generateNew(template) is the primary detection point
2. Primitive operations (computeMac, sign, encrypt) are attached
   as depending rules — fired when called on the tracked variable
3. Each primitive maps to its correct context:
   • AEAD/Hybrid → CipherContext
   • Mac → MacContext
   • Signature → SignatureContext

Detection Coverage

Primitive	Context	Templates
AEAD	CipherContext	AES128_GCM, AES256_GCM, AES128_CTR_HMAC_SHA256, AES256_CTR_HMAC_SHA256
Mac	MacContext	HMAC_SHA256_128BITTAG, HMAC_SHA256_256BITTAG, HMAC_SHA512_256BITTAG, HMAC_SHA512_512BITTAG, AES_CMAC
Signature	SignatureContext	ECDSA_P256, ECDSA_P384, ECDSA_P521, ED25519, RSA_SSA_PKCS1_3072_SHA256_F4
Hybrid	CipherContext	ECIES_P256_HKDF_HMAC_SHA256_AES128_GCM, ECIES_P256_HKDF_HMAC_SHA256_AES128_CTR_HMAC_SHA256

Changes

• TinkMac.java: HMAC/CMAC key generation + computeMac/verifyMac depending rules
• TinkSignature.java: ECDSA/ED25519/RSA key generation + sign/verify depending rules
• TinkHybrid.java: ECIES key generation + encrypt/decrypt depending rules
• TinkDetectionRules.java: registers all new rule classes
• 6 new test files (3 rule files + 3 test files)

Testing

• 160 tests pass, 0 failures
• 8 skipped tests are pre-existing (present before this PR)
• mvn spotless:check passes
• mvn -B clean package -pl java passes

Follow-up

• DeterministicAead operations
• ChaCha20Poly1305, AES_SIV, AES_EAX key templates
• KeysetHandle.newBuilder() pattern detection

Note: This PR branches from a local main that includes #406 (Tink AEAD).
Once #406 merges upstream, this PR will show only the Mac/Hybrid/Signature
changes. The relevant commit is 9d63d21.