WPA3 is supported by default, so from that angle you do not need to change anything, it will work with the vanilla images as-is.
If you use the openssl, wolfssl or mbedtls (default) packages is up to you, either will work (feature sets and performance differ slightly, but all of them allow using WPA3SAE).