Add script and cronjob to update debian-sso CA certificate and revocation list

More information on https://wiki.debian.org/DebianSingleSignOn#Documentation_for_web_application_owners



Signed-off-by: Mattia Rizzolo <mattia@debian.org>