openssh: include destination constraints for smartcard keys

From openssh-portable 54ac4ab2b53ce9fcb66b8250dee91c070e4167ed,
OpenBSD-Commit-ID: add879fac6903a1cb1d1e42c4309e5359c3d870f

PR: 271839
Sponsored by: The FreeBSD Foundation
Approved by: so
Security: FreeBSD-SA-23:05.openssh
Security: CVE-2023-28531

(cherry picked from commit 2b4fb1350ceea0f2a0f04b1b8f5bfd3c32329ae4)