Extend API to handle provider-specific capabilities

[microshine]

Cryptographic providers often have different capabilities and limitations. Some providers may restrict certain operations, such as saving Certificate Signing Requests (CSR) to tokens or performing other cryptographic actions. These differences can lead to errors when attempting unsupported operations. To address this, the API should be extended to allow applications to query and receive information about provider-specific capabilities, helping to avoid errors when interacting with various providers.

Here is a comment that describes one of these limits: PeculiarVentures/fortify-tools#177 (comment)