Crypto: Refactor OpenSSL operation step data-flow logic

[bdrodes]

Refactor to use 'OperationStep' to model API input/outputs for individual functions.

[Copilot]

Pull Request Overview

This PR refactors the Quantum CodeQL library to introduce a unified OperationStep model for API inputs/outputs across OpenSSL operations. The key changes are:

• Introduce a new OperationStep base class with IOType and OperationStepType enums for standardized dataflow modeling
• Add dedicated QL modules (SignatureOperation, KeyGenOperation, HashOperation, CipherOperation) that extend OperationStep for each OpenSSL API pattern
• Update imports and remove legacy operation modules, wiring in new dataflow analyses (OperationStepFlow, AvcToOperationStepFlow, EncValToInitEncArgFlow) in OpenSSLOperationBase.qll

Reviewed Changes

Copilot reviewed 21 out of 21 changed files in this pull request and generated no comments.

File	Description
shared/quantum/codeql/quantum/experimental/Model.qll	Added getRawKeyValueConsumer and raw‐value source logic, with a TODO left
cpp/ql/test/experimental/library-tests/quantum/{nodes,node_properties,node_edges}.expected	Updated expected outputs to cover new KeyGeneration and SignatureOperation nodes
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/SignatureOperation.qll	New OperationStep‐based QL module for signature APIs
cpp/ql/lib/experimental/quantum/OpenSSL/Operations/OpenSSLOperations.qll	Swapped out legacy imports for new CipherOperation, HashOperation, etc.

Comments suppressed due to low confidence (4)

shared/quantum/codeql/quantum/experimental/Model.qll:1923

• [nitpick] The method name getARawValueSource uses an extra 'A' prefix which is inconsistent with other method names; consider renaming it to getRawValueSource for clarity.

    NodeBase getARawValueSource() {

shared/quantum/codeql/quantum/experimental/Model.qll:1935

• There is a lingering TODO in getChild regarding raw key output; to improve maintainability, address this case or remove the placeholder before merging.

      //TODO: how do I output the raw key if known? If not known, it may not require/have a raw value consumer, don't output

cpp/ql/lib/experimental/quantum/OpenSSL/Operations/OpenSSLOperations.qll:2

• [nitpick] After refactoring the import list, verify that all required operation modules are present and remove any stale imports to avoid missing dependencies.

import CipherOperation

cpp/ql/lib/experimental/quantum/OpenSSL/Operations/SignatureOperation.qll:1

• New OperationStep‐based modules like SignatureOperation.qll do not have dedicated unit tests in library-tests/quantum; consider adding tests to validate their dataflow behaviors.

/**

[nicolaswill]

I've kicked off CI runs again.