Default PAdES provider backed by pure Elixir/OTP PKCS#8 signing.
PKCS#8 PEM keys are the default and require no executable, NIF, or native
compilation. PKCS#12/PFX loading is available as an explicit compatibility
option and requires an openssl executable at runtime.