For codesigning SPK packages, support certificates accessible through CryptoAPI system stores

[bbassett-tibco]

In order to allow signing with codesigning certificates that are accessible only by CryptoAPI system stores (such as with a HSM), add support for selecting system stores and certificate search criteria to find a certificate in system stores.