Update/VM downloads fail with certificate errors

My work uses Netskope which is a pest for developer tooling.

This means that there is a certificate that needs to be included in the roots in order for TLS to work.

❯ shuru upgrade
shuru: checking for updates...
shuru: upgrading 0.5.4 -> 0.5.5
shuru: downloading CLI (0.5.5)...
shuru: https://github.com/superhq-ai/shuru/releases/download/v0.5.5/shuru-v0.5.5-darwin-aarch64.tar.gz
Error: failed to download CLI v0.5.5

Caused by:
    io: invalid peer certificate: UnknownIssuer

There are a couple of ways for applications to allow this:

1. a cacerts env var (curl, git, and a bunch of others do this)
2. use the system cert chain (go does this)

Would it be possible to allow one of the above for shuru?