Update libgit2

Part of this entailed removing the “skip certificate check” code, which I remember being important for fetching/cloning. The underlying libgit2 APIs have made this more complex, so we'll probably want to reconsider how we expose the feature.