Package ca-certificates demanded for "apt update" and upgrades to trixie

That package was considered missing upon having changed /etc/apt/sources.list for the installation of any package. And once it was missing, there was nothing I could do to establish a functional download again. I suggest installing it in the base image.