struct bgpd_config includes various pointers and those should not be passed.
Instead use an zeroed stack object and copy_config() to ensure that all
pointers are NULL before passing the struct.
Also implement imsg_recv_config() which does the reverse.

Reported by Shibo, Shawn, Hugo, Systopia Team
OK tb@

Reflects kern_pledge.c r1.346 and r1.348.

Also in open(2): Document when __pledge_open appeared and add a missing word.

ok deraadt

Add support for benchmarking ML-KEM key encapsulation mechanisms to
openssl speed. The following operations are measured:

- key generation
- encapsulation
- decapsulation

Two parameter sets are supported:

mlkem768
mlkem1024

The benchmark can be invoked using the following options:

mlkem run all ML-KEM benchmarks
mlkem768 run ML-KEM-768 benchmarks
mlkem1024 run ML-KEM-1024 benchmarks

Results are reported similarly to other public key algorithms, showing
time per operation and operations per second. Machine-readable output
(-mr) support is also added for ML-KEM.

ok tb