q: Recommend enabling architecture-optimized AES and SHA-256

It's usually very helpful to enable AES-XTS and SHA-256 optimized with
the ARM crypto extensions (or x86 AES-NI and SHA-NI).  AES-XTS is used
by file-based encryption; SHA-256 is used by dm-verity.  I was a bit
surprised to see that these weren't already in the recommended configs.

This is change I6175e16261a7360d34de76735e06e21c41db58c8 applied to the
'q' directory.

Bug: 130816578
Change-Id: I7049f7f47bc343a8001640809e1eb6dafded172f
Signed-off-by: Eric Biggers <ebiggers@google.com>