Clean up APE libsec build process.  The new version generates
x509-ape.c from /sys/src/libsec/port/x509-ape.c and removes
the extern declarations so APE can be a testbed for CertX509
access.