fix bugzilla SSL cert in puppet

we're still using the star.wm cert all this time, so this is not a
real change.

this is to prevent Apache breakage until RT #5011 is resolved.
puppet did not restart Apache.

we just got a new bug-attachment.wm.org cert today, which is now
actually used, as opposed to before.

the bugzilla.wm.org cert though is the old one from 2008,
so this would have caused expiration warnings for users.

in this state puppet can run and Apache can be restarted though.

Change-Id: I1e93f4d231c6a63af95b9e58d3c07b22471de935