Prepare aws-lc-fips-sys v0.13.1

[justsmth]

Description of changes:

• Made change to "allowlist" for headers so that openssl/experimental/kem_deterministic_api.h can be picked up.
• Improve logic around use of external bindgen (i.e., bindgen-cli).
• Bump version of aws-lc-fips-sys to v0.13.1.
• Only first commits has manual changes.
• See automated workflow here: https://github.com/aws/aws-lc-rs/actions/runs/12671943594

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 92.89%. Comparing base (c358484) to head (10ebbbc).
Report is 146 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #651      +/-   ##
==========================================
- Coverage   95.80%   92.89%   -2.91%     
==========================================
  Files          61       67       +6     
  Lines        8143     9718    +1575     
  Branches        0     9718    +9718     
==========================================
+ Hits         7801     9028    +1227     
- Misses        342      402      +60     
- Partials        0      288     +288     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.