Add "ca-certificates" feature

[sebst]

The feature should

1. Install "ca-certificates"
2. Take a list of new line-separated URLs as an option
3. Download the urls from 2 to /usr/local/share/ca-certificates using wget or curl (if either of those are already installed) OR curl (if that needs to be installed)
4. Run update-ca-certificates using sudo