make sure PUK is blocked when not explicitly initialized

update submodule 'ant-javacard'

write large EC public keys correctly

Do not use APDU.isCommandChainingCLA() of the JC API

Tests have shown that some card's implementations of this method are not in compliance with the API specification. Use a own convienence method to parse the CLA byte for the chaining bit.

default configuration: private key import not allowed

first release