update Kyber and Dilithium from upstream

[bhess]

Updates Kyber and Dilithium from upstream, see #1245 (comment)

Dilithium adds Apache2-License. Kyber fixes a code comment. No code changes. No interop changes.

• Does this PR change the input/output behaviour of a cryptographic algorithm (i.e., does it change known answer test values)? (If so, a version bump will be required from x.y.z to x.(y+1).0.)
• Does this PR change the the list of algorithms available -- either adding, removing, or renaming? Does this PR otherwise change an API? (If so, PRs in oqs-provider, OQS-OpenSSL, OQS-BoringSSL, and OQS-OpenSSH will also need to be ready for review and merge by the time this is merged.)

[dstebila]

Thanks Basil!