feat: add support for aes_decrypt expression

[rafafrdz]

Summary

• Added support for Spark aes_decrypt by mapping AesDecrypt to native scalar function aes_decrypt.
• Added tests for aes_decrypt in CometStringExpressionSuite covering both:
  • default args: aes_decrypt(input, key)
  • explicit args: aes_decrypt(input, key, mode, padding, aad)
• Updated spark_expressions_support.md to mark aes_decrypt as supported.
  Closes [Feature] Support Spark expression: aes_decrypt #3188

[andygrove]

Thanks for the contribution @rafafrdz. I took a quick look and this looks nice. I kicked off CI.

On the testing side, the current tests only cover GCM mode with a 256-bit key. Since the Rust implementation also supports CBC and ECB modes with PKCS padding, and handles 128-bit, 192-bit, and 256-bit keys, it would be great to add test coverage for those combinations.

It might also be worth adding a null input test, maybe inserting a row with null encrypted data and verifying the result is null.

[rafafrdz]

Thanks for the contribution @rafafrdz. I took a quick look and this looks nice. I kicked off CI.

On the testing side, the current tests only cover GCM mode with a 256-bit key. Since the Rust implementation also supports CBC and ECB modes with PKCS padding, and handles 128-bit, 192-bit, and 256-bit keys, it would be great to add test coverage for those combinations.

It might also be worth adding a null input test, maybe inserting a row with null encrypted data and verifying the result is null.

Done 😄 @andygrove