improvements of watchdog and forked workflow instance

1) sig term is passed down to the watchdog child process
2) the forked child (WF instance) takes care of its exceptions and exits alwayes properly
3) the "last executed action" of the paused workflow is retrieved via wf history (and re-executed again)
Add Mock-Session to server init process
Add new connector convenience method get_scalar_as_list

The get_scalar_as_list method uses get_meta to test the node and
converts a scalar node to a list. If a list is found, it is returned
as is. Queries to other nodes results in an undefined behaviour.
Move profile configuration to connector

The definitions found in profile.xml are now in the new config layer
Profiles are in realm.tpl/profile and realm.tpl/crl
CRLs can use a common default profile.

The spelling of some flags has changed, all boolean flags must be set
using 0 and 1 (true/false are no longer valid identifiers).

The validity notation in entity profiles accepts relative or absolute
notations on an autodetect basis, the simple "days" notation is no
longer supported.
Main server config now in new config system

All server related config items are now in the system.server namespace
The default config for system is now split into multiple files
Add API call to retrieve default token and use it
Fix some issues with watchdog.

Fix reload problem
Introduce verbose names on server/watchdog process
Add config setting to disable the watchdog
Migrate certificate ldap publishing to generic publication workflow
Remove deprecated workflow xmls - wont work any longer...
Remove unused workflow classes and unused refs to ldap stuff
Fix problems with SigHandler and Proc::SafeExec in Watchdog

We need to reset the SIG{CHLD} Handler in the forked Watchdog childs as
otherwise Proc::SafeExec fails.
Add test activity in Test workflow
Remove CA creation commands from OpenSSL crypto layer

The old code had special handling to create csr/key/certifiate for a
self-signed ca. This code is removed with this patch. You must setup
your ca keys/certificate by your own and import it using openxpkiadm
Move config of authentication handlers to connector
Change API for token handling, changes calls for default token

The new API seperates two types of tokens. This introduces the new API, but
misses the changes to the TokenManager - the patch is just seperated for
reference and useless without the other changes on the TokenManager!
Move PKI realm config to connector, adjust NICE cert issue for new syntax

Move the whole realm/token configuration from xml to connector.
Introduce new API methods for automated token retrieval for timevariant
tokens (superseeds the determine_issue_ca logic and makes it usable for
all other types of tokens)
Rewrite of CRL Issue workflow with migration to connector
Fix calls to pkcs7/javakeystore tokens
Add date format "epoch" to OpenXPKI::DateTime:get_validity
Cleanup xpath leftovers and remove outdated workflow classes