Include Mozilla Root CAs by Default

Refer to the strategy identified in CBD-5173 and implemented in the underlying C++ core by CXXCBC-327.

Please review the implementation notes and treat them as acceptance criteria here. Aside from verifying test coverage for each SDK, also verify that we have an easy way to identify which certs were included in a specific release, and verify that each SDK has a mechanism to to override the default certs and point to their own certs if needed (e.g., advice we gave for env variables in JSCBC-1140).