Add ML-DSA-44, SHAKE256 algorithm identifiers

From discussions with cryptographers, the general consensus is ML-DSA-44
is sufficient for PQC signing, with smaller keys and signatures.
ML-DSA-65 and ML-DSA-87 will be primarily for specialized use cases,
e.g. gov't requirements.
Additionally, the witness network is likely to use ML-DSA-44.

Added the SHAKE256 hash algorithm identifier, though I'm not certain
it's actually needed because we'll only support the pure variant of
ML-DSA.

Updated the comment for LMS/LMS-OTS to state it should not be used at
all, as there are no clients that will support this.

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>

Author: Hayden-IO