security/shibboleth-sp: Reintroduce direct dependencies to silent Q/A.

The dependencies where previously added indirectly through the
dependency chain via opensaml, bust the Q/A disapproved of that.

Add patch to check for missing DataSealer during cookie recovery.