OOTB: Port `pki` settings model to settings extensions

[sam-berning]

Create a settings extension for pki.

Definition of done

A new pki crate is created under sources/settings-extensions, and all variants use the model defined in that crate in place of the existing settings. Additionally, a basic settings-pki RPM package is created that installs the extension binary.