Fix keygen without signing capability

If no usage is provided we need to explicitly
set "cert" as usage. This only affects OpenPGP because
for S/MIME the UI forces at least one usage.

GnuPG-Bug-Id: T4373
BUG: 404795