Tag wolfSPDM releases and pin wolfTPM's submodule to them #23

Context

wolfTPM consumes wolfSPDM as the lib/wolfSPDM submodule. It needs to pin to a release tag instead of a branch commit. The wolftpm-core branch already merged into main in #34.

Origin

main...wolftpm-core

What is needed

• Tag v0.9.0 with release notes once the v0.9.0 milestone is closed.
• Point wolfTPM's .gitmodules branch at main and pin the submodule to v0.9.0.
• Update the wolfTPM ChangeLog (smaller WOLFTPM2_DEV, SPDM now from wolfSPDM).
• Repeat the pin for v1.0.0 at the end of the release train.

Blockers and dependencies

The rest of the v0.9.0 milestone, #40 (version header), and #41 (ChangeLog).

Acceptance criteria

wolfTPM CI is green with the submodule pinned to the v0.9.0 tag, and later to v1.0.0.