pqcpoc

go1.26 now exposes HelloRetryRequest and CurveID, so we can get rid of some of the ugliness

+canary strings

only refuse

+CLAUDE.md

add wolfssl, sort