Explicitly bump certifi dependency due to root cert removal

[eaon]

Does not affect ruleset, it's just a dependency update.

Fixes https://github.com/freedomofpress/securedrop-https-everywhere-ruleset/security/dependabot/11