Pin OpenSSL to 3 to match Conda Forge global pinning
Fixes Conda issue with the latest versions of Lima not "selected' by the solver because Lima's dependency are older with these version than with Lima's version that predates the pinning of openssl.
Conda forge pins a number of dependency globally (to remove some degree of freedom in the solver and variants of package). Update of the global pinning is called a "migration". The migration from openssl 1.1.1* to 3* was in Dec 2022
We kept using 1.1.1* which means that we stuck with older version of dependencies, and since the conda solver seams to weight the solution with the version of the dependencies 1.9.15 was prefered (newer hdf5 for instance).
cc: @naudet