Various LUKS2 OPAL support improvements
- introduces private dm uuid prefix LUKS2_OPAL so that we can detect active devices configured for OPAL locking range when LUKS2 header is missing
- enables detached header support even for OPAL enabled devices
- implements missing crypt_suspend/resume support. It locks OPAL range after successful suspend of top level dm device
- adds new tests