Update wolfTPM packaging for the wolfSPDM submodule

[aidangarske]

Context

With SPDM coming from lib/wolfSPDM, packaging paths that copy or describe wolfTPM sources need to include the submodule.

Origin

aidangarske/wolfTPM branch spdm-use-wolfspdm

What is needed

• Rust build.rs and crate vendoring include lib/wolfSPDM.
• meta-wolfssl recipe uses gitsm://.
• SBOM lists wolfSPDM as a component.
• Release notes: git archive omits submodules; use make dist.

Blockers and dependencies

The wolfTPM submodule PR merging.

Acceptance criteria

Rust, Yocto, and SBOM CI jobs pass with SPDM enabled.