pkgbase: reorganise caroot and openssl packages

[dfr]

Summary

This splits out the certctl utility into a new certctl package and the
openssl libs into an openssl-lib package.

PR: 272816