Ticket #2772 TPS: correct tokenOrigin and tokenType attrs for recovered externalReg certs

This patch fixes the following issues:
1. The "orphaned certs" resulted in termination of tokens sharing the same certificate --  Investigation shows that the isLastActiveSharedCert() did not work as expected where cert status was checked instead of token status, resulting in the method always returning True so even termination at last cert did not revoke the cert;
2. The "tokenOrigin" was incorrect after externalReg "recovery" --  Investigation shows that recovered certificate was written twice into the tokendb, effectively resulting in the second write overwriting the first one with initialization (incorrect) values.
3. Incorrect sequence in updating the tokendb with cert records;  The sequence was a. remove all certs, b. transform EnrolledCertsInfo into token cert records (in memory), c. adding all token cert records into the empty token record;  That resulted in certs intended for retention deleted and rewritten with initialization (incorrect) values; The fix now does the following: a. remove the certs NOT to be retained, b. transform EnrolledCertsInfo into token cert records, c. add the certs that's NOT already in token record into the token record.

A new TPS profile, externalRegISEtoken, is also added for ease of providing test procedure.

Change-Id: Ic36931fad553d7eb38d07ee4fce7cf374a4b7652

Ticket 2772 (added patch) ExternalReg tokenOrigin for recovered cert

This patch fixes a regression for non-ExternalReg where it references
an externalReg-specific variable and causes issue;
Some debugging are also added;
One typo change from method name setLifeycleState to setLifecycleState
which only occurs in a few spots.

Change-Id: If23f854e3b4da3a7145c115d55898a0360d4e0f8