fix(ca): install ca-certs before importing custom CA certificates

Fix #51

templates/gitlab-ci-semrel.yml

@@ -834,9 +834,9 @@ stages:
       command: ["--service", "semrel", "3.14.0"]
   before_script:
     - !reference [.semrel-scripts]
-    - install_ca_certs "${CUSTOM_CA_CERTS:-$DEFAULT_CA_CERTS}"
     # install git and OpenSSH
     - maybe_install_packages ca-certificates git openssh-client gpg gpg-agent
+    - install_ca_certs "${CUSTOM_CA_CERTS:-$DEFAULT_CA_CERTS}"
     - maybe_install_yq
     - cd "${SEMREL_CONFIG_DIR}"
     - prepare_semantic_release