Mark any areas still using `const vector&` input args for change to span

[randombit]

Noticed during review of #5072 that these are still used in certificate store interfaces. That's likely not the only spot. Should mark all of them for conversion to span in Botan4