Add ML-KEM public key encapsulation API

Add the top-level ML-KEM keygen, encapsulation, and decapsulation
entry points, sampling fresh randomness via the RNG and delegating to
the derandomized core.