Refinements to OpenPGP card support

• Implement automatic detection of the intended card (ident is now an optional parameter)
• Implement migration from softkey to card backend
• Implement set-backend to switch from one card to another
• Adjust database schema: backend should be in cacerts, not cas