Updates the macOS Homebrew auto-detection to try `openssl@4` first,
falling back to `openssl@3` / `openssl@3.0`. The pre-3.0 `openssl@1.1`
formula is no longer probed.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

…with-padding (#2638)

#2630 fixed CipherCtxRef::cipher_update and cipher_update_vec to size
their output as round_up(inlen, 8) + 8 for wrap-mode ciphers but missed
cipher_update_inplace, which kept the inlen + block_size bound. For
Cipher::aes_256_wrap_pad() with 9 bytes of input, the assertion accepts
a 17-byte slice while OpenSSL writes 24 bytes through it — a 7-byte
out-of-bounds write reachable from safe Rust.

Switch cipher_update_inplace to the shared cipher_update_output_size
helper and add a regression test.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>