feat: falling back to mozilla CAs when system has no certs

[miki725]

• Followed the steps in the contributor's guide: https://crashoverride.com/docs/other/contributing#filing-the-pull-request
• PR title uses semantic commit messages
• Filled out the template to a useful degree
• bundling mozilla root CA store for when there are no default certs nimutils#45
• using safeRequest from nimtuils to fallback to bundled CA bundle con4m#119

Issue

➜ docker run -it --rm ghcr.io/crashappsec/chalk:0.3.3-dev load https://chalkdust.io/connect.c4m
warn:  ~/.local/chalk/chalk.log: could not resolve sink filename. disabling sink
warn:  default_out: sink is not enabled and cannot be subscribed for topic report
warn:  default_out: sink is not enabled and cannot be subscribed for topic audit
info:  Attempting to load module from: https://chalkdust.io/connect.c4m
error: No SSL/TLS CA certificates found.

Description

this will allow chalk to communicate with external APIs even when system has no certs such as in busybox containers

most of the change is in nimutils and then its bubbled up to con4m and chalk

Testing

existing tests cover SSL coverage. to test busybox case:

➜ docker run -it --rm -v $PWD:$PWD -w $PWD busybox ./chalk --debug load https://chalkdust.io/connect.c4m

[ee7]

LGTM.