net/geoipupdate, www/caddy: Remove ca_root_nss

Now that 12.3 is the minimum supported, remove ca_root_nss hard
deps. For systems that have caroot, ca_root_nss is to my knowledge
vestigial and unused, and does nothing except install things.