security/tailscale: Add missing dependency on ca_root_nss

tailscale needs to validate some certificates at runtime:
TryLogin: fetch control key: Get \"https://login.tailscale.com/key\": x509: certificate signed by unknown authority\n"}

Reported by: Pat Maddox <pat@patmaddox.com>