debian: fix openssl fips config

[BeryJu]

fix FIPS module not being enabled by default

see https://docs.openssl.org/3.6/man7/fips_module/#making-all-applications-use-the-fips-module-by-default

[github-actions]

authentik FIPS Image build status - debian-fips (``)

Image built: ghcr.io/goauthentik/fips-debian:trixie-slim-fips77 for commit 99d0e7c93b5f3c77c0b52cd1108fa4218081e116

Test output:

image=ghcr.io/goauthentik/fips-debian
full=ghcr.io/goauthentik/fips-debian:trixie-slim-fips77
### Debian version ###
docker run --rm ghcr.io/goauthentik/fips-debian:trixie-slim-fips77 \
	cat /etc/debian_version
13.2
### Test that base images has OpenSSL with FIPS enabled ###
docker run --rm ghcr.io/goauthentik/fips-debian:trixie-slim-fips77 \
	openssl list -providers -provider default -provider base -provider fips
Providers:
  base
    name: OpenSSL Base Provider
    version: 3.5.1
    status: active
  default
    name: OpenSSL Default Provider
    version: 3.5.1
    status: active
  fips
    name: OpenSSL FIPS Provider
    version: 3.1.2
    status: active

[github-actions]

authentik FIPS Image build status - xmlsec1-fips (``)

Image built: ghcr.io/goauthentik/fips-xmlsec1:1.3.7-slim-trixie-fips77 for commit 99d0e7c93b5f3c77c0b52cd1108fa4218081e116

Test output:

image=ghcr.io/goauthentik/fips-xmlsec1
full=ghcr.io/goauthentik/fips-xmlsec1:1.3.7-slim-trixie-fips77
### Test that base images has OpenSSL with FIPS enabled ###
docker run --rm ghcr.io/goauthentik/fips-xmlsec1:1.3.7-slim-trixie-fips77 \
	openssl list -providers -provider default -provider base -provider fips
Providers:
  base
    name: OpenSSL Base Provider
    version: 3.5.1
    status: active
  default
    name: OpenSSL Default Provider
    version: 3.5.1
    status: active
  fips
    name: OpenSSL FIPS Provider
    version: 3.1.2
    status: active
### xmlsec1 version ###
docker run --rm ghcr.io/goauthentik/fips-xmlsec1:1.3.7-slim-trixie-fips77 \
	xmlsec1 --version
xmlsec1 1.3.7 (openssl)

[github-actions]

authentik FIPS Image build status - python-fips (PYTHON_VERSION=3.12.12)

Image built: ghcr.io/goauthentik/fips-python:3.12.12-slim-trixie-fips77 for commit 99d0e7c93b5f3c77c0b52cd1108fa4218081e116

Test output:

image=ghcr.io/goauthentik/fips-python
full=ghcr.io/goauthentik/fips-python:3.12.12-slim-trixie-fips77
### Python version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.12.12-slim-trixie-fips77 \
	python --version
Python 3.12.12
### Python SSL version ###
docker run --rm ghcr.io/goauthentik/fips-python:3.12.12-slim-trixie-fips77 \
	python -c "from ssl import OPENSSL_VERSION; print(OPENSSL_VERSION)"
OpenSSL 3.5.1+ak-fips 1 Jul 2025