Upgrade hpke dependency

[rozbb]

As we prepared for in #311, we can now upgrade hpke. I've also added zeroization to the serialization/deserialization routines, since otherwise there might be some private key material left on the stack.