ca-certs: generate install artifacts and improve certdata/trust-store compatibility

- stop committing generated man/completion files in contrib/
- generate man page and shell completions during Meson install via install-generated-docs.sh
- switch reqwest to native-tls and add Mozilla hg bootstrap certs with openssl fallback fetch
- make certdata sync use a temporary auto-cleaned workspace by default
- add BLFS/make-ca compatibility outputs and symlinks under /etc/pki and /etc/ssl
- validate extracted outputs are non-empty and add tests for temp sync output behavior

Cargo.toml

@@ -9,7 +9,7 @@ base64 = "0.22.1"
 clap = { version = "4.5.60", features = ["derive"] }
 clap_complete = "4.5.66"
 clap_mangen = "0.2.31"
-reqwest = { version = "0.13.2", default-features = false, features = ["blocking", "rustls"] }
+reqwest = { version = "0.13.2", default-features = false, features = ["blocking", "native-tls"] }
 
 [lints.rust]
 warnings = "deny"