Migrate PKCS11 from "engine" to "provider"

OpenSSL 3.0.0 has deprecated the engine api in favour of the provider api. We currently use the engine api and OpenSC for pkcs11 access to HSMs. We need to move to using the provider api as soon as possible.

OpenSC has an open ticket for OpenSSL 3.0.0 https://github.com/OpenSC/OpenSC/issues/2308

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information