Fix custom RNG initialization cleanup

[aidangarske]

• Guard DRBG failure cleanup with the same feature conditions used for its state.
• Fix CUSTOM_RAND_GENERATE_BLOCK plus HAVE_HASHDRBG builds, including wolfTPM fwTPM STM32.
• Add an OS check configuration covering the regressed macro combination.
• Confirm the regression test fails on master and passes with the fix.
• Verify the wolfTPM preset and full STM32 fwTPM build and emulator self-test.
• failure here https://github.com/wolfSSL/wolfTPM/actions/runs/35388773468/job/105756686048?pr=602

[Copilot]

🟢 Approval recommended

No unresolved blocking issues were identified.

Pull request overview

Fixes custom RNG failure cleanup when combined with Hash DRBG and adds regression build coverage.

Changes:

• Aligns DRBG cleanup guards with initialization conditions.
• Adds Linux OS-check coverage for the affected configuration.

File summaries

File	Description
wolfcrypt/src/random.c	Guards DRBG failure cleanup consistently.
.github/configs/os-check-linux.json	Adds regression build coverage.

Review details

• Files reviewed: 2/2 changed files
• Comments generated: 0
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

MemBrowse Memory Report

No memory changes detected for:

• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-openssl-compat
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• linuxkm-pie
• linuxkm-standard
• stm32-sim-stm32h753