Use MLKEM-768 for TLS, when available

Closes #41041 (closed).

This branch also backports Sebastian's fix for #40911 (closed), which I needed in order to be able to compile maint-0.4.8 without warnings.

Note: This branch is against maint-0.4.8.