Add "valid if S/MIME" condition to key filters

This condition can be used to filter out invalid S/MIME certificates
when asking the user for signing or encryption keys because, unlike
for OpenPGP, only valid S/MIME certificates can be used for signing and
encryption.

• GnuPG-bug-id: T6216