CVE-2026-39829: reject oversized RSA moduli (>8192 bits) and enforce
strict DSA parameter limits (Q exactly 160 bits, in-range G and Y) in
the vendored golang.org/x/crypto/ssh key parsers, preventing a
CPU-exhaustion denial of service during signature verification