Add FIPS cross-build test when compatible clang is available

[kornelski]

#412 removed test due to lack of an old-enough runner for old clang. It may be possible to revert it after upgrading sys crate to newer boringssl with hopefully new-enough clang allowed for FIPS.