Consider replacing webpki-roots with rustls-platform-verifier

[maertsen]

I wonder if stopping to bundle webpki-roots, instead relying on the platform makes more sense for us. I would imagine this makes packaging easier for distributions that prefer to use their own truststores. Additionally, it takes us out of the loop of revocation for CA certificates.