heimdal: fix wrt OpenSSL 3.5

• Bump the library version.
• Don't load the legacy provider. It is no longer enabled by default and looks like kdc doesn't actually need it.

Reviewed by: cy
Differential Revision: https://reviews.freebsd.org/D52114