Add support for certificate groups to icon provider

This allows marking groups as unusable if one of their certificates isn't
usable for a certain purpose like encryption or signing.

(cherry picked from commit 690aeef36dcdea7b072d1c41496de984d8ed2e18)

• GnuPG-bug-id: T6742