Support OpenSSL 3 Providers

Various refactoring to clean up OpenSSL RSA and ECDSA support. And implementation to use OpenSSL 3 Providers API.

dnssec-signzone is able to sign and verify RSA signed zone using OpenSSL3 + pkcs11-provider + softhsm2.

ref #2996