Get more up-to-date root certs. This was blocked for a while because
certifi wouldn't build on windows, but this is now fixed, with minimal
changes to the use case -- only a small change in the bootstrap script
is required.

The new certifi lib is also a few megabytes lighter than before, which
is good for rebar3.

This fixes the output of end_per_testcase crash notifications when the
test passes.

This also detect an issue of the kind with rebar_pkg_SUITE which is now
fixed.

Fixes an issue where some skipped test suites could end up misreported
as the previous suite. See
https://github.com/ferd/cth_readable/issues/10

relx ~> 3.22.0
erlware_commons ~> 0.22.0
cf ~> 0.2.2

Prior to this patch, the escriptize command flat out selected all
declared dependencies.

This patch instead looks at the app files and only includes the
dependencies of the top level app and the extra ones, avoiding to
package more apps than required.

This required a version bump on cth_readable as it mistakenly included
'syntax_lib' instead of 'syntax_tools' as a dependency.

This reworks the version and hash printing in the lockfile to minimize
diff changes:

- the version is on its own line so that the locks are mostly the same
  aside from the last line
- the hashes are each printed on one line with the package name for
  simpler diffing too.

latest mozilla bundles

The new version fixes parse transforms over OTP incompatibility that
would crash entire compile runs before.

cth_readable 1.2.0 uses cf 0.2.1 to output colors, which makes it
support dumb terminals without issue.

This fixes a typo that could cause failure in some test runs.

- eunit assert look better
- lager logs to the html logs

This uses cth_readable to:
- silence error_logger output to the shell unless a test fails
- silence ct:pal output to the shell unless a test fails

I have currently not baked in any way to disable this behaviour, but I
figured if it is required, there is time to do it before the final
3.0.0 release.