Use CA_FILE as a constant and allow overriding via ENV vars.

You can set REQUESTS_CA_FILE if absolutely necessary. This should
only happen for the rarest of cases (or when you have self signed
certs).
Use Requests::Error for all errors.

This makes it easy to catch all exceptions.