Add a TPM profile size guard and export allowlist to CI

[aidangarske]

Context

The consolidation plan requires that the wolfTPM profile does not grow: sizeof(WOLFSPDM_CTX) about 9.5 KB and libwolftpm .text+.rodata within v4.2.0 +2%. Today the downstream job only checks that no standard-requester symbols are exported.

Origin

main...wolftpm-core

What is needed

• CI step that builds the TPM profile and fails if sizeof(WOLFSPDM_CTX) exceeds a checked-in limit.
• size check of libwolftpm against a v4.2.0 baseline +2%.
• nm allowlist of exported symbols for the standalone and TPM builds.

Blockers and dependencies

No response

Acceptance criteria

The job fails on a deliberate context or symbol regression and passes on the current tree.