Update mk-ca-bundle.pl from curl/curl (#37830)

https://github.com/fleetdm/fleet/actions/workflows/update-certs.yml has
been failing for some time.
There's a redirection by mozilla.com that is breaking the curl execution
in the current version of the script.
It's fixed by adding the `-L` to the curl execution.

I updated the script from the new version in
https://github.com/curl/curl/blob/9f1838e965f893ad46c230d923961b4365e271b4/scripts/mk-ca-bundle.pl
The reviewer can (and should :) download it and compare it with the
version added on this PR.

Successful run with this branch:
https://github.com/fleetdm/fleet/actions/runs/20717674684 which
generated the following PR: https://github.com/fleetdm/fleet/pull/37834.

.github/workflows/update-certs.yml

@@ -44,6 +44,10 @@ jobs:
         diff --ignore-matching-lines "Certificate data from Mozilla as of*" certs.pem cacert.pem
         rm cacert.pem
 
+    - name: Add changes file to orbit
+      run: |
+        echo "* Updated Orbit CA certs" > orbit/changes/updated-ca-certs
+
     - name: PR changes
       uses: peter-evans/create-pull-request@f22a7da129c901513876a2380e2dae9f8e145330 # v3.12.1
       with: