WORKSPACE: update CA roots

Removed:
GLOBALTRUST 2020 (removed for security reasons, <100 certificates issued)

Added:
FIRMAPROFESIONAL CA ROOT-A WEB

Change-Id: Id9ac4cbe007c603a72a92f9c599d3c68043bb9dd
Reviewed-on: https://review.monogon.dev/c/monogon/+/3253
Reviewed-by: Leopold Schabel <leo@monogon.tech>
Tested-by: Jenkins CI
diff --git a/WORKSPACE b/WORKSPACE
index 27a213f..b5a52f2 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -137,8 +137,8 @@
 # Derived from Mozilla NSS, currently needed for containerd to be able to pull images
 http_file(
     name = "cacerts",
-    sha256 = "1794c1d4f7055b7d02c2170337b61b48a2ef6c90d77e95444fd2596f4cac609f",
-    urls = ["https://curl.se/ca/cacert-2024-03-11.pem"],
+    sha256 = "1bf458412568e134a4514f5e170a328d11091e071c7110955c9884ed87972ac9",
+    urls = ["https://curl.se/ca/cacert-2024-07-02.pem"],
 )
 
 # lz4, the library and the tool.