use phpseclib from 3rdparty

TODO:
- [x] evaluate if 3rdpaty/blowfish can be removed together with the whole legacy migration @schiesbn 
- [x] test files_external password encryption - maybe @PVince81 THX
- [x] test files_external sftp - maybe @bantu THX