Cloud KMS now speaks ML-DSA, SLH-DSA, and ML-KEM, because apparently even HSMs need a PQ migration plan.