generate certs if REGISTRY_TLS_VERIFY

Usage:
```
docker run -e REGISTRY_TLS_VERIFY=1 \
  -v /etc/docker/certs.d:/certs.d -p 5000:5000 \
  -e GCS_BUCKET= -e GCP_OAUTH2_REFRESH_TOKEN= \
  google/docker-registry 
```

while waiting for https://github.com/docker/docker-registry/pull/693 to be merged.

/cc @tiborvass @dmp42 @dlorenc @ktintc @jbeda 
yes, because when we generate cert we really only care about localhost/boot2docker.

If you want to support arbitrary hostname you should bring your own cert for now.

See also https://github.com/GoogleCloudPlatform/docker-registry/issues/33 for later