Update cacert.pem from Mozilla CA bundle

[github-actions]

Automated update of cacert.pem from https://curl.se/ca/cacert.pem.

---

Note

Refreshes chia/ssl/cacert.pem to Mozilla’s Dec 2, 2025 bundle, updating metadata and the CA root set (adds new roots, removes deprecated ones).

• SSL / Certificates:
  • Update chia/ssl/cacert.pem metadata: date → 2025-12-02, mk-ca-bundle.pl 1.29 → 1.30, new SHA256.
  • Revise CA root set: remove deprecated entries (e.g., CommScope Public Trust roots); add numerous new/updated roots (e.g., Telekom Security TLS RSA 2023, OISTE roots, BJCA roots, TrustAsia roots, D-TRUST 2023 roots, SSL.com 2022 roots, GlobalSign R46/E46, etc.).

^{Written by Cursor Bugbot for commit 08c80ff. This will update automatically on new commits. Configure here.}