* bugfix/handle-website-CA-change branch in main Git repo now creates
the CA bundle without the CA that signed the old certificate, and
names the bundle file in a more generic way
* bugfix/handle-website-CA-change in the IUK Git repo has the changes
needed to adjust to the above change
* bugfix/handle-website-CA-change branch in main Git repo updates the
security check script to use the new CA bundle (which actually
isn't very useful, see #8536, but still)
For testing purposes, the changes from the IUK repo were imported into
the main one as a chroot_local-patch, which needs to be removed once
a new version of tails-iuk is released and uploaded.
