ca-certificates-java: add ca-certificates runtime dep