Post-Quantum TLS Gateway

Post-quantum key establishment and signatures are active. Legacy public-key fallback is disabled on public interfaces.