use downstream cryptography

Cryptography is currently broken upstream due to deprecation of OpenSSL
engines in Fedora 41+ and CentOS Stream 10. I manage to merge a fix
upstream, but that will take some time until they release a new version.
For more details, see the GitHub issue:
pyca/cryptography#11690

ci-setup-src

@@ -39,7 +39,7 @@ if [ -f ./configure ]; then
    . .venv/bin/activate
    export PATH="$(pwd)/.venv"/bin/:$PATH
    python3 -m pip install setuptools-scm setuptools-rust wheel
-   python3 -m pip install concurrencytest cryptography lxml pycurl six pyparsing
+   python3 -m pip install concurrencytest lxml pycurl six pyparsing
    echo "./configure --enable-destructive-tests --enable-parallel-tests $localbuild $DISTROCONFOPTS PKG_CONFIG_PATH=$EXTERNAL_CONFIG_PATH"
    ./configure --enable-destructive-tests --enable-parallel-tests $localbuild $DISTROCONFOPTS PKG_CONFIG_PATH=$EXTERNAL_CONFIG_PATH
    ;;

ci-update-apt

@@ -74,6 +74,7 @@ required_pkg pkg-config
 required_pkg psmisc
 required_pkg puma
 required_pkg python3-boto3
+required_pkg python3-cryptography
 required_pkg python3-dev
 required_pkg python3-googleapi
 required_pkg python3-lxml