Merge "fix: make TF-A use provided OpenSSL binary" into integration