added a snippet to import PnH provider CA certs in FxOS

While you have to throw another commit into this (see next comment), can you change `var pnh_manifest` to `const PNH_MANIFEST`? I'd like this mostly for readability. It might help empahsize that this is a user-constant and the rest is not :)