Link against OpenSSL 3

[reaperhulk]

It's probably around time to do this. Sticking in the 37 milestone, although we may choose to bump to 38.

[alex]

Note that rust-openssl just reverted their bump to OpenSSL 3 due to performance issues: rust-openssl/rust-openssl#1576 (comment)

[reaperhulk]

Alex and I agreed we're going to do this for the 37.0 release. pyca/infra#397 is the related infra PR (which we won't merge until we're close to release)