[hwkey] Add a versioned KDF interface

Adds a KDF API to hwkey that allows derivation of versioned keys gated
by the current Trusty version. This allows new keys to be made
accessible to clients only after the Trusty rollback version has been
incremented.

Test: com.android.trusty.hwcrypto.test
Bug: 222362083
Change-Id: I1f8a68d291bf53e7b50391df7a3560a1b72d0c5d