internal/rosa/package: migrate nss

Signed-off-by: Ophestra <cat@gensokyo.uk>

internal/rosa/git.go

@@ -7,8 +7,10 @@ import (
 	"hakurei.app/internal/pkg"
 )
 
-// Git is the package used by [Toolchain.NewViaGit].
-var Git = H("git")
+var (
+	_git       = H("git")
+	_nssCACert = H("nss-cacert")
+)
 
 // NewViaGit returns a [pkg.Artifact] for cloning a git repository.
 func (t Toolchain) NewViaGit(
@@ -19,8 +21,8 @@ func (t Toolchain) NewViaGit(
 		path.Base(url),
 		".git",
 	)+"-src-"+path.Base(rev), THostNet, t.Append(nil,
-		nssCACert,
-		Git,
+		_nssCACert,
+		_git,
 	), &checksum, nil, `
 git \
 	-c advice.detachedHead=false \