support BTUOrderParams for EBICS 3.0 request

…ents

…te-params

feat(certificate): make key length and validity years configurable

feat(cli): add parameterized launcher for runtime-configured environments

Bumps [org.bouncycastle:bcprov-jdk18on](https://github.com/bcgit/bc-java) from 1.82 to 1.84.
- [Changelog](https://github.com/bcgit/bc-java/blob/main/docs/releasenotes.html)
- [Commits](https://github.com/bcgit/bc-java/commits)

---
updated-dependencies:
- dependency-name: org.bouncycastle:bcprov-jdk18on
  dependency-version: '1.84'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

The letters printed the SHA-256 of the public key by default, but the
INI/HIA requests always transmit the X.509 certificate. Under H005 the
letter must carry the SHA-256 of the DER-encoded certificate (spec
4.4.1.2.3), which the bank verifies against the request — the public-key
hash failed bank-side verification

fixes #49

…tle-bcprov-jdk18on-1.84

Bump org.bouncycastle:bcprov-jdk18on from 1.82 to 1.84

…rypto

Java 17 ships java.util.Base64 (since 8) and java.util.HexFormat (since 17),
so commons-codec is redundant. gnu-crypto was declared in pom.xml but never
imported.