Use OpenSSL provider with BIND for Fedora 42+ and RHEL10+
    
    OpenSSL Engine API is deprecated and ability to compile against it is
    removed in RHEL10. OpenSSL provider API is the future.
    
    Fedora 42+ also defaults to OpenSSL provider. With pkcs11-provider, the
    same PKCS#11 modules can be loaded transparently like with OpenSSL
    engines. Thus, we can update configuration to use the provider API.
    
    While Fedora 41 also defaults to OpenSSL provider, we need BIND version
    that supports using OpenSSL provider API. This backport was only done in
    Fedora 42.
    
    Fixes: https://pagure.io/freeipa/issue/9696
    
    Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: Florence Blanc-Renaud <flo@redhat.com>