Remove hardcoded security provider

[terryquigleysas]

Is your feature request related to a problem?
It may now be possible to remove the hardcoded call to add the BouncyCastleProvider from OpenSearchSecurityPlugin.java

What solution would you like?
Remove call to add the BouncyCastleProvider in OpenSearchSecurityPlugin.java and any associated code.

What alternatives have you considered?
N/A

Do you have any additional context?
This may have several benefits:

• Removal of unnecessary code
• Helps towards potential support of FIPS-compatible Bouncy Castle provider
• Removes another SecurityManager reference

See related issues:
#3420
#1497
#1500
#3317

[terryquigleysas]

Please assign to me if happy with it. I will provide a PR.

[stephen-crawford]

[Triage] Hi @terryquigleysas, thanks for creating this issue. This makes sense with the FIPs compatibility effort you are making.