nss: rename libssl.a to libssl3.a

* see #28258 for more details/discussion about this
* resolves conflict with openssl by renaming libssl.a to libssl3.a
* removes key only flag