Add support for personnalisation PKI
Add support for personnalisation PKI

After the card has been loaded and before setup, one has the possibility
to personalize the card by generating a private-public keypair and
produce a certificate signed by a PKI.
This allows to authenticate the card issuer and ensure the card is legit
and has not been tampered.

New methods:
    - export_PKI_pubkey: export the perso public key
    - import_PKI_certificate: import the new certificate inside the card
    - export_PKI_certificate: export the certificate stored inside the card
    - sign_PKI_CSR: sign the CSR that will be used to generate the certificate
    - lock_PKI: lock the Personalisation process. Once locked, certificate cannot be changed
    - challenge_response_pki: ensure that the certificate corresponds to the perso publi/private keypair stored inside the card

Toporin/SatoChipApplet