Swap gerrit to new gerrit.wikimedia.org certificate

Use correct CA for git.wikimedia.org while we're here

Change-Id: I22cb4db2c47f2cb7e0fb3a58a7b0055fb14ce965