chore: add release note script

[jmayclin]

Description of changes:

This includes an automated way of generating release notes, because I didn't want to manually look through 30 different PRs

Testing:

output

$ GITHUB_TOKEN=<redacted> uv run generate_release_notes.py --release-commit 92f7827c8487eb2a99b443aec6ee7d1df031b1bf

generating release notes from (1c5798b82442067bace943f748f4f24ae1770bed, 92f7827c8487eb2a99b443aec6ee7d1df031b1bf]



## Release Summary:
* Adds support for post-quantum ML-DSA certificates

## What's Changed:
* Remove unused negotiate_kem function causing build failure by @Mark-Simulacrum in https://github.com/aws/s2n-tls/pull/5316
* chore: Bump nixpkgs version to 24.11 by @dougch in https://github.com/aws/s2n-tls/pull/5294
* tests: policy snapshot test by @lrstewart in https://github.com/aws/s2n-tls/pull/5309
* fix(benches): use session ticket for resumption by @jmayclin in https://github.com/aws/s2n-tls/pull/5305
* feature: release ML-DSA support by @lrstewart in https://github.com/aws/s2n-tls/pull/5307
* feature: support for ML-DSA handshake signatures by @lrstewart in https://github.com/aws/s2n-tls/pull/5303
* tests: turn verbose mode off by default in integ tests by @lrstewart in https://github.com/aws/s2n-tls/pull/5286
* Revert "build: add pull requests limit for dependabot" by @boquan-fang in https://github.com/aws/s2n-tls/pull/5302
* chore: Update Apache test certificates from RSA1024 to RSA2048 by @dougch in https://github.com/aws/s2n-tls/pull/5285
* feature: add crypto support for mldsa signing by @lrstewart in https://github.com/aws/s2n-tls/pull/5272
* refactor: remove conn->client_hello_version by @lrstewart in https://github.com/aws/s2n-tls/pull/5278
* build(deps): unpin test-log because of MSRV updates by @boquan-fang in https://github.com/aws/s2n-tls/pull/5300
* build: add pull requests limit for dependabot by @boquan-fang in https://github.com/aws/s2n-tls/pull/5299
* chore: bindings release 0.3.19 by @goatgoose in https://github.com/aws/s2n-tls/pull/5298
* build(deps): update strum requirement from 0.25 to 0.27 in /bindings/rust/standard by @dependabot[bot] in https://github.com/aws/s2n-tls/pull/5292
* build(deps): update test-log-macros requirement from =0.2.14 to =0.2.17 in /bindings/rust/standard by @dependabot[bot] in https://github.com/aws/s2n-tls/pull/5290
* feat: Add `as_ptr()` API for Config by @goatgoose in https://github.com/aws/s2n-tls/pull/5274
* tests: reduce integ test flakiness + improve debugability by @lrstewart in https://github.com/aws/s2n-tls/pull/5282
* build(deps): update env_logger requirement from 0.10 to 0.11 in /bindings/rust/standard by @dependabot[bot] in https://github.com/aws/s2n-tls/pull/5296
* build(deps): bump aws-actions/configure-aws-credentials from 4.1.0 to 4.2.0 in /.github/workflows in the all-gha-updates group by @dependabot[bot] in https://github.com/aws/s2n-tls/pull/5297
* tests: fix flaky test_serialization by @lrstewart in https://github.com/aws/s2n-tls/pull/5288
* chore: bump standard MSRV to 1.82.0 by @johubertj in https://github.com/aws/s2n-tls/pull/5295
* chore: Add comments to track dependency requirements by @johubertj in https://github.com/aws/s2n-tls/pull/5287
* tests: improve coverage for s2n_stream_cipher_null by @wafuwafu13 in https://github.com/aws/s2n-tls/pull/5268
* build(deps): bump astral-sh/setup-uv from 5 to 6 in /.github/workflows in the all-gha-updates group by @dependabot[bot] in https://github.com/aws/s2n-tls/pull/5273
* chore: bindings release 0.3.18 by @johubertj in https://github.com/aws/s2n-tls/pull/5284
* ci: fix expectations when using system default libcrypto by @lrstewart in https://github.com/aws/s2n-tls/pull/5279
* ci: handle 429 from yahoo.com network integ test by @lrstewart in https://github.com/aws/s2n-tls/pull/5280

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.