git: Provide GIT_SSL_CAINFO if missing

This wraps the git components that depend on cacert, and sets `$GIT_SSL_CAINFO` to `$SSL_CERT_FILE` if it is set.

This way, git installed outside of NixOS also has access to the CA certs, and there's only one environment variable needed in NixOS.