Make SafeEvpPKeyHandle.OpenKeyFromProvider throw PNSE on OSSL less than 3.0

[krwq]

Fixes: #105175

Description:

• RSA HasNoPrivateKey is still needed on OpenSSL 1.1.1
• ECDSA/ECDH doesn't have the same problem as RSA when trying to sign/key exchange with public key
• found issue on OpenSSL 1.1.1 that we're throwing CryptographicException (providers require OpenSSL 3.0) where PlatformNotSupportedException seems like a better fit - also improved message so it's more clear what user needs to do
• Manual tests are not failing on OpenSSL 1.1.1 anymore
• Added couple of providers tests based on default provider - they're not as comprehensive as existing manual tests because losing info about provider from SafeEvpPKeyHandle will not cause them to fail (this is because NULL is equivalent to default provider so they may accidentally pass) - they will exercise the new logic in the DuplicateHandle and other places in the automated tests

[krwq]

/backport to release/9.0-rc1

[github-actions]

Started backporting to release/9.0-rc1: https://github.com/dotnet/runtime/actions/runs/10486290096

[krwq]

/backport to release/9.0-rc2

[github-actions]

Started backporting to release/9.0-rc2: https://github.com/dotnet/runtime/actions/runs/10487089426

[github-actions]

@krwq an error occurred while backporting to release/9.0-rc2, please check the run log for details!

Error: The specified backport target branch release/9.0-rc2 wasn't found in the repo.

[krwq]

/backport to release/9.0

[github-actions]

Started backporting to release/9.0: https://github.com/dotnet/runtime/actions/runs/10487129178