update SSL ciphers for contacts.wm.org to support PFS

I used the cipher suite list from I39b389b63ae6b8848abb20431091263717192582.
I think contacts.wikimedia.org is for internal use only,
but I guess it's still better to enable Forward Secrecy on it.

Patch Set 4 removes kEDH+AESGCM as JanZerebecki recommends.

Bug: 53259
Change-Id: Ic18e2a27e0e25fe3ee287c5d56834a77ba78c35c
Merge "update SSL ciphers for contacts.wm.org to support PFS" into production