Replace the deprecated ChallengeResponseAuthentication

[konstruktoid]

Replace the deprecated ChallengeResponseAuthentication with KbdInteractiveAuthentication if OpenSSH version > 8.7

https://www.openssh.com/txt/release-8.7 (2021-08-20):

• ssh(1)/sshd(8): remove references to ChallengeResponseAuthentication
  in favour of KbdInteractiveAuthentication. The former is what was in
  SSHv1, the latter is what is in SSHv2 (RFC4256) and they were
  treated as somewhat but not entirely equivalent. We retain the old
  name as a deprecated alias so configuration files continue to work
  as well as a reference in the man page for people looking for it.
  bz#3303

Current versions:
AlmaLinux8: OpenSSH_8.0p1, OpenSSL 1.1.1k FIPS 25 Mar 2021
AlmaLinux9: OpenSSH_8.7p1, OpenSSL 3.0.7 1 Nov 2022
Debian Bookworm: OpenSSH_9.2, OpenSSL 3.0.9 30 May 2023
Ubuntu Focal: OpenSSH_8.2p1 Ubuntu-4ubuntu0.9, OpenSSL 1.1.1f 31 Mar 2020
Ubuntu Jammy: OpenSSH_8.9p1 Ubuntu-3ubuntu0.4, OpenSSL 3.0.2 15 Mar 2022