task: update backend sectigo root cert programatically

[DerekRoberts]

#1872 adds a Sectigo cert to the backend using a GitHub secret. Adjust this to pull down certs at build time, which should remove the requirement to update the GitHub secret when certs are updated.