Migrate PKCS11 from "engine" to "provider"

OpenSSL 3.0.0 has deprecated the engine api in favour of the provider api. We currently use the engine api and OpenSC for pkcs11 access to HSMs. We need to move to using the provider api as soon as possible.

OpenSC has an open ticket for OpenSSL 3.0.0 https://github.com/OpenSC/OpenSC/issues/2308