Give wget a proper CA certificate

After switching the https certificate on api.turris.cz to our own private authority, the tagger started to fail when downloading data from there. This bundles and uses the CA as the trust anchor.

It is already deployed, I needed it to start working, but I'm posting it for review ex-post, for comments and such. But I believe the change to be trivial.