deskutils/calibre: Fix fetch

Grab mozilla-ca-certs.pem file from security/ca_root_nss instead
of fetching a changing file from the net. This avoids checksum
errors when the file is rerolled.

Reported by: pkg-fallout