In FIPS mode, RPM is not able to import MLDSA-87 public key, therefore verification of RPMs will start failing once we ship dual-signed packages.

Reproducer: https://gitlab.com/redhat/rhel/tests/rust-rpm-sequoia/-/tree/48a463b8fb48a49c901d54c4bfc426525c53b32e/Integration/rpm-before-RHEL10

The relevant fix in rpm-sequoia will be in RHEL-110994, but without enabling these algorithms in crypto policies, it will not work.

I think the scope should be basically revert of the following MR we did couple of months back:

https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/merge_requests/253

(we can consider enabling only the `MLDSA87-ED448` though, as it is the one required for CNSA 2.0.