openSUSE Leap 16.0 openCryptoki Security Patch CVE-2026-40253

This update for openCryptoki fixes the following issues

Security issue:

- CVE-2026-40253: Updated fix for malformed BER-encoded cryptographic objects

(bsc#1262283).

Non security issue:

- Refactored .spec file to fully support transactional and immutable operating systems

(jsc#PED-14609):

* Migrated user and group creation (pkcs11, pkcsslotd) from imperative %pre shell commands to

declarative systemd-sysusers configuration.

* Replaced manual /var directory tracking and %ghost directives with

comprehensive systemd-tmpfiles configurations.

* Implemented dynamic, architecture-specific tmpfiles.d generation to properly provision

hardware-specific token directories (e.g., ccatok, ep11tok, lite, and HSM_MK_CHANGE).

- Fixed permissions for /run/opencryptoki within tmpfiles.d to ensure the

daemon can successfully drop privileges and bind its communication socket.

* Moved 32-bit and 64-bit shared library symlink creation (such as PKCS11_API.so, stdll, and methods)

from %post...