Create codeql-analysis.yml

Add build system for Debian 11

Fork and patch MacOS and OpenSSL v1.1 compatibility

bugfix: gck-rpc-util.c: for loop should check count not array

for loop should check count not array

opt out of seccomp

Also, cleaned the debian control files for proper library
dependencies.

This is a commit of a patch received in e-mail from
Klaus Darilion an embarrasingly long time ago.

This function returned an uninitialized return value in case no
sessions had been opened by the application.

libseccomp

Initialize seccomp again in dispatch threads, only requiring a
small subset of the syscalls required by the parent process.

Rewrite to use open() instead of fopen() to avoid having to
seccomp-allow the mmap() syscall.

The list of allowed syscalls is shrinked by postponing seccomp
initialization to after the PKCS#11 module is initialized and
the network socket is opened.