security/nss: Add TODO about ca_root_nss PORTREVISION

Since ca_root_nss inherit's nss's PORTVERSION, add a comment
to remind maintainers to reset ca_root_nss's PORTREVISION next time
that nss's PORTVERSION gets bumped.

Approved by: portmgr@ (blanket, comment-only change)