Draft: Rewrite cipher-suites system test to pytest

This started as a serious effort to rewrite the cipher-suites system test to pytest, but because the minimal required dnspython version that has the "verify" argument for dns.query.tls() is 2.5.0rc1 it ended up as a worthwhile dnspython learning exercise. So, DO NOT MERGE until most CI images have dnspython 2.5.0+. Locally tested on Fedora 39 (non-FIPS) and OL9 (FIPS) with dnspython 2.5.0rc1.