caroot: drop VERSION tags from certs

With this change, we'll drop the "with $FreeBSD$" lines from trusted/
certs in the next update. untrusted/ will need to be done manually, but
I'll likely just do them all manually, commit, then run the script and
commit any legitimate updates after confirming the output matches what
I did manually.

Reported by: imp
Reviewed by: imp

(cherry picked from commit bbc8585ef557be36b3fda75e3a41d725aedb1c1e)