merge: upstream fixes (mutt/default)

 * When $flag_safe is set, flagged messages cannot be deleted.
 * Adds the '@' pattern modifier to limit matches to known aliases.
 * Adds <mark-message> binding to create "hotkeys" for messages.
 * Updated requirement on the C compiler.
 * Updated French translation (except for 1 string).
 * Make a string translatable. Add a missing space at the end.
 * Make a string translatable.
 * Updated French translation.
 * Updated French translation.
 * Fix mark-message translation and keybind menu.
 * More openssl1.1 fixes: remove uses of X509->name in debugging. (closes #3870)
 * Don't close stderr when opening a tunnel. (closes #3726)
 * Minor resource and error logic cleanup in tunnel_socket_open()
 * Make sure that the output of X509_NAME_oneline is null-terminated.
 * Revert db13010a2e8d but add a comment. (see #3870)
 * Corrected comment.