Add support for EPA

[paraddise]

Is your feature request related to a problem? Please describe.
Microsoft added Extended Protection for Authentication to MSSQL, so client must provide channel binding in NTLM or Kerberos authentication request.

Describe the solution you'd like
Library always send channel binding when authenticating via NTLM and Kerberos

Describe alternatives you've considered
In MSSQL we can request, accept or ignore channel binding. If one client doesn't support CBT we cannot set it to require.

Additional context
Extended Protection for Authentication Overview

How to Easily Bypass EPA to Compromise Any Web Server that Supports Windows Integrated Authentication

Ldap3: commit for TLS channel binding support

A journey implementing Channel Binding on MSSQLClient.py

Impacket PR: MSSQL Implements Channel Binding Token

MsvAvChannelBindings must be in AV_PAIR that can be in CHALLENGE_MESSAGE or in AUTHENTICATE_MESSAGE via NTLMv2_CLIENT_CHALLENGE.
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-nlmp/83f5e789-660d-4781-8491-5f8c6641f75e

Certipy implementation of channel binding

I also want to mention that many offensive tools already has support for EPA.