fix(build-newer-r): pass the system CA bundle to the ABI-verdict query

verify-full needs sslrootcert; without it libpq looks for ~/.postgresql/root.crt, the query fails, and the bulk skip falls back to checking every package.

local/build-newer-r.R

@@ -71,7 +71,8 @@ if ("--dry-run" %in% args) {
           port = 15432,
           user = "rpkgs",
           password = Sys.getenv("PGPASS"),
-          sslmode = "verify-full"
+          sslmode = "verify-full",
+          sslrootcert = bincraft::postgres_sslrootcert("verify-full")
         )
         on.exit(DBI::dbDisconnect(con), add = TRUE)
         rows <- DBI::dbGetQuery(