Support custom CA bundles for JWKS

See the runner version tls-ca-file: https://docs.gitlab.com/runner/configuration/advanced-configuration.html#the-runners-section