Currently, the -longtest TryBots run on CLs that touch crypto/tls, to run the slow-ish BoGo test suite.

Also, cmd/dist runs the GOFIPS140=$VERSION go test crypto/... tests only in long mode.

This is sub-optimal in two ways: CLs that touch crypto/tls are excruciatingly slow to TryBot, and flake and suffer from broken builders all the time; meanwhile, most crypto CLs are not tested against older versions of the FIPS module.

Can we add a new TryBot which is enabled for all CLs that touch crypto/... and that tests in long mode only crypto/... and GOFIPS140=$VERSION go test crypto/...?

/cc @golang/release @golang/security