Remove use of BoringSSL-only `AES_CMAC` oneshot API in favor of a OpenSSL compatible set of calls to the `CMAC_*` interface
Remove use of BoringSSL-only `AES_CMAC` oneshot API in favor of a OpenSSL compatible set of calls to the `CMAC_*` interface

The `AES_CMAC` oneshot API [1] is essentially a wrapper around the `CMAC_*` APIs in BoringSSL.

[1] https://github.com/google/boringssl/blob/master/crypto/cmac/cmac.c#L84

PiperOrigin-RevId: 424051407

google/tink,google/tink,google/tink,google/tink,google/tink,google/tink,google/tink,google/tink