fix(ext/node): implement full AES-CCM cipher mode
- Implement RFC 3610 AES-CCM with streaming CTR encryption and CBC-MAC
authentication for 128/192/256-bit key sizes
- Add AesBlock enum for dynamic AES key size dispatch
- Add CCM-specific JS validation: plaintextLength in setAAD, message
size limits, authTagLength requirements
- Update set_aad ops to accept plaintextLength parameter for CCM
- Add aes-128/192/256-ccm to getCiphers()
- Enable test-crypto-authenticated.js compat test (fully passing)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
