Use up-to-date ca-certificates during build

[SaschaSchwarze0]

Description

Kaniko used to have a committed ca-certificates.crt file that it puts into the Kaniko image. The file is three years old. That's not a viable approach from a functional perspective (it misses new root certificates that eventually get used to sign certificates used by a container registry), also not from a security perspective (because revoked certificates do not get removed).

I am changing the Dockerfiles to build that file.

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

• Includes unit tests
• Adds integration tests if needed.

Reviewer Notes

• The code flow looks good.
• Unit tests and or integration tests added.