Add PEM conversion output from config/provider for PKI-Paths provider

- Optional de-encrypted private cert output (e.g. for Python HTTPS libs)
- Refactor QgsPkiPathsBundle to QgsPkiBundle
- Move some of QgsAuthProviderPkiPaths functions to virtual/protected