core: use screen instead of tmux (less deps)
ca-certificates: replace python script with C

closes #90

the C implementation was contributed by @doughdemon - thanks!

verified, and tested: all crt files have the same checksum and none are
omitted or added.

this shaves ca 70MB from the core metapackage