fix bug 1083844; update ca-certificates package

This ensures that the `ca-certificates` package is updated prior to attempting to add the `dchen` repo. I also sorted the list of packages for human readability purposes.

```
==> default: Notice: /Stage[main]/Socorro::Vagrant/Package[ca-certificates]/ensure: ensure changed '2010.63-3.el6_1.5' to '0:2014.1.98-65.0.el6_5'
==> default: Notice: /Stage[main]/Socorro::Vagrant/Yumrepo[dchen]/baseurl: baseurl changed '' to 'https://repos.fedorapeople.org/repos/dchen/apache-maven/epel-$releasever/$basearch/'
==> default: Notice: /Stage[main]/Socorro::Vagrant/Yumrepo[dchen]/enabled: enabled changed '' to '1'
==> default: Notice: /Stage[main]/Socorro::Vagrant/Yumrepo[dchen]/gpgcheck: gpgcheck changed '' to '0'
==> default: Notice: /Stage[main]/Socorro::Vagrant/Package[apache-maven]/ensure: created
```

`r?` @rhelmer