Resolves #5756

Handle ipv6 addresses

Add support for additional SSH hostkey types.

IPv6 addresses should be used identically internally; we should not
denote them with brackets in one operating system and without them in
another.

Fix the `-DENABLE_WERROR=ON` build for gcc 10.2

This allows the library to be built using a pre-1.9.0 version of libssh2.

Specifically: ECDSA_256, ECDSA_384, ECDSA_521 and ED25519.

This change makes it possible to build with newer versions of gcc
without warnings. There were two warnings issued:

* gcc 8 added
  [`-Wstringop-truncation`](https://developers.redhat.com/blog/2018/05/24/detecting-string-truncation-with-gcc-8/),
  which warns if a call to `strncpy(3)` is prone to accidentally
  truncating the destination string, since `strncpy(3)` does NOT add a
  terminating `NULL` if the destination buffer is not large enough to
  hold the input.

  This change uses the pattern suggested in
  https://us-cert.cisa.gov/bsi/articles/knowledge/coding-practices/strncpy-and-strncat
  to fix the locations flagged by gcc.
* There was a potentially uninitialized access of `dest` in `fs_copy`.

repository: use intptr_t's in the config map cache

Since we're using atomic primitives to read and write into the config
map cache, we need to read/write something pointer-sized.  Use an
`intptr_t` for the config map cache.

Add tests for `git__multiply_int64_overflow`

As it turns out, the implementation of `git__multiply_int64_overflow` is
full of edge cases and tricky arithmetic. That means that it should have
unit tests.

As a result, a bug in `git__strntol64` was found (and fixed!) in
clang+32-bit.

Third attempt to fix the 32-bit version of `git__multiply_int64_overf…

This change should now fix the issue for realsies.

`./libgit2_clar -score::strtol` passes on a 32-bit Docker.

Avoid using `__builtin_mul_overflow` with the clang+32-bit combo

This causes clang to produce an undefined reference to `__mulodi4`. This
could be fixed by statically linking some compiler-rt libraries to
provide this symbol, but let's first stop the bleeding since doing the
correct long-term fix requires some non-trivial CMake knowledge which I
lack.

ci: run codeql

pack: continue zlib while we can make progress

Continue the zlib stream as long as we can make progress; stop when we
stop getting output _or_ when zlib stops taking input from us.

Re-enable the RC4 test

Using RC4 is not a _certificate_ problem, it's a cipher problem.  The
SSL implementation should and will fail with an unrecoverable error
(-1).  There's no opportunity to accept/continue.

This used to fail with an error indicating a mis-use of OpenSSL on platforms
using it due to poor error handling. Re-enable it even if this isn't the right
error code to use for now.

Cache the parsed submodule config when diffing

Make git__strntol64() ~70%* faster

winhttp: support optional client cert

This change uses compiler intrinsics to detect overflows instead of
using divisions to detect potential overflow. This makes the code faster
and makes it easier to read as a bonus side-effect!

Some of the things this quickens:

* Config parsing.
* Tree parsing.
* Smart protocol negotiation.

\* Measured by running `libgit2_clar` with `-fno-optimize-sibling-calls
-fno-omit-frame-pointer` under `perf(1)`:

```shell
$ perf diff --symbols=git__strntol64 --compute=ratio \
  --percentage=absolute baseline.data perf.data
\# Event 'cycles'
\#
\# Baseline           Ratio  Shared Object
\# ........  ..............  .............
\#
     0.25%        0.321836  libgit2_clar
```

Also repurposed an unused function and deleted another one.

This change makes that anything that calls `git_diff__from_iterators`
(any of the `git_diff_xxx` functions) only need to parse the
`.gitmodules` file once. This can be avoided by calling
`git_repository_submodule_cache_all(...)`, but we can do that safely for
the user with no change in semantics.

Fixes: #5725

git.git-authors: Replacing his/her with their