Core profile optional (doc)

Let's document via well contextualized code comments how the different parts of `core` are optional.

The only thing that has a drawback would probably be openssh disabled because no host cert is autocreated.

/cc @Radvendii