Optionally (dis)allow degenerate DICE chains in verifyCsr

Bug: 323246910
Test: atest libkeymint_remote_prov_support_test & manual testing of
 `rkp_factory_extraction_tool` with/without `allow_degenerate=false` on a
 device with a degenerate DICE chain
(cherry picked from https://android-review.googlesource.com/q/commit:39de0cb35be1e4f935a44e2f15d0c86a75e4471b)
Merged-In: Ia1833c0bb6a895ae5b8aefea24850a41cf956f38
Change-Id: Ia1833c0bb6a895ae5b8aefea24850a41cf956f38