caroot: note the source license we extracted from

[kevans]

Summary

NSS and certdata.txt, which we extract the root store from, are licensed
under the MPL2. It's not clear that certificate data like this may be
copyrighted in the first place, but in the interest of being a good
consumer of NSS data note the source license in extracted certs.