Set label and ID on PKCS11 EC public key

[aidangarske]

• Fixes wc_ecc_verify_hash returning WC_HW_E on a label/ID-generated PKCS#11 EC key — Pkcs11EcKeyGen set the label/ID only on the private key, so verify couldn't find the public key object. Now sets them on the public key template too.
• Caught here: https://github.com/aidangarske/wolfssl-examples/blob/cb15c8dec3cbf8e7d9ada7f6edb3d0301c5cfe3e/.github/examples-manifest.yml#L1415 checked here https://github.com/wolfSSL/wolfssl-examples/actions/runs/29779301218/job/88477936034?pr=598 currently suppressed till merged

[Copilot]

Pull request overview

This PR addresses a PKCS#11 ECDSA verification failure when using an EC key generated with a label/ID: the generated public-key object is destroyed after export, so later verification cannot find a token-resident public key by label/ID and returns WC_HW_E.

Changes:

• Reorders public-key selection in Pkcs11ECDSA_Verify() to prefer creating a session public-key object from the exported ECC point before trying label-based lookup.
• Adds an explanatory comment documenting why the exported point is preferred in this scenario.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

retest this please

[github-actions]

MemBrowse Memory Report

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• linuxkm-pie
• linuxkm-standard
• stm32-sim-stm32h753

[aidangarske]

Jenkins retest this please