look at ways to speed up ca-certificates hook

[nekopsykose]

the current one is quite slow, as it does a ton of shell stuff (to really see this, look at how long it takes for a ./cbuild -t pkg in the bldroot setup, while having 100% cpu load elsewhere)

i think alpine has one written in C that should be faster as an example https://gitlab.alpinelinux.org/alpine/ca-certificates

as an aside, we should also find a way to update it ourselves, as we rely on debian for it and the latest version is 20240705 but they still haven't updated it in forever