Merge "Expect module hash in attestations only for KM V4+" into main