Move the OSS package types to the `smithy-security/pkg` repository

[ptzianos]

This will allow us to finally clean up the OSS repository from the last remnants of code not related to our components and SDK