luci-base: add system cert bundle detection