generate certs if REGISTRY_TLS_VERIFY

Usage:
```
docker run -e REGISTRY_TLS_VERIFY=1 \
  -v /etc/docker/certs.d:/certs.d -p 5000:5000 \
  -e GCS_BUCKET= -e GCP_OAUTH2_REFRESH_TOKEN= \
  google/docker-registry 
```

while waiting for https://github.com/docker/docker-registry/pull/693 to be merged.

/cc @tiborvass @dmp42 @dlorenc @ktintc @jbeda 
@proppy  don't you wanna *make sure* users are using tlsv1 ? (would need `'--ssl-version', 3`)