* Update Dilithium

* Alternative montgomery reduce to avoid i386 functest errors

* Explicit casts for msvc

* More casts; bump upstream version; fix metadata

* another cast

* Fix bug in the output of the ct_verify function

A bug in the CCA transformation was reported on the pqc-forum on 2020-12-10
https://groups.google.com/a/list.nist.gov/g/pqc-forum/c/kSUKzDNc5ME

It was fixed today in 669522db63.
This commit ports that fix to PQClean

* add note to SECURITY.md

* update upstream commit in META.yml

Makes Kyber-AVX run on MacOS (#251)

* rainbow update

* update workflows

* re-add /O2 in nmake Makefile

It happened in another place

my new clang-tidy version comes with some quite restrictive checks that fail on
current code in PQClean.

I have disabled the following three:
https://releases.llvm.org/11.0.0/tools/clang/tools/extra/docs/clang-tidy/checks/llvmlibc-restrict-system-libc-headers.html
https://clang.llvm.org/extra/clang-tidy/checks/cppcoreguidelines-init-variables.html
https://clang.llvm.org/extra/clang-tidy/checks/bugprone-reserved-identifier.html