caroot: drop VERSION tags from certs

With this change, we'll drop the "with $FreeBSD$" lines from trusted/
certs in the next update. untrusted/ will need to be done manually, but
I'll likely just do them all manually, commit, then run the script and
commit any legitimate updates after confirming the output matches what
I did manually.

Reported by: imp
Reviewed by: imp
Differential Revision: https://reviews.freebsd.org/D41597