Bump swift-crypto to 2.5.0; address review feedback

Author: yim-lee

Package.swift

@@ -751,7 +751,7 @@ if ProcessInfo.processInfo.environment["SWIFTCI_USE_LOCAL_DEPS"] == nil {
         // dependency version changes here with those projects.
         .package(url: "https://github.com/apple/swift-argument-parser.git", .upToNextMinor(from: "1.2.2")),
         .package(url: "https://github.com/apple/swift-driver.git", branch: relatedDependenciesBranch),
-        .package(url: "https://github.com/apple/swift-crypto.git", .upToNextMinor(from: "2.4.1")),
+        .package(url: "https://github.com/apple/swift-crypto.git", .upToNextMinor(from: "2.5.0")),
         .package(url: "https://github.com/apple/swift-system.git", .upToNextMinor(from: "1.1.1")),
         .package(url: "https://github.com/apple/swift-collections.git", .upToNextMinor(from: "1.0.1")),
         .package(url: "https://github.com/apple/swift-certificates.git", .upToNextMinor(from: "0.3.0")),

Sources/PackageSigning/VerifierPolicies.swift

@@ -130,6 +130,15 @@ struct _OCSPVerifierPolicy: VerifierPolicy {
 
     let verifyingCriticalExtensions: [ASN1ObjectIdentifier] = []
 
+    /// Initializes an `_OCSPVerifierPolicy` that caches its results.
+    ///
+    /// - Parameters:
+    ///     - failureMode: `OCSPFailureMode` that defines policy failure in event of failure.
+    ///                 Possible values are `hard` (OCSP request failure and unknown status
+    ///                 not allowed) or `soft` (OCSP request failure and unknown status allowed).
+    ///     - httpClient: `HTTPClient` that backs`_OCSPRequester` for making OCSP requests.
+    ///     - validationTime: The time used to decide if the OCSP request is relatively recent. It is
+    ///                   considered a failure if the request is too old.
     init(failureMode: OCSPFailureMode, httpClient: HTTPClient, validationTime: Date) {
         self.underlying = OCSPVerifierPolicy(
             failureMode: failureMode,