feat: start preparing for a cli release (#672)

This diff includes some final changes to be ready for blessing
a cli release. These changes are:

1. run `go generate ./...` to update the bundled CA

2. update the header we use for measuring

3. ensure `mk` uses the latest version of several tools

Reference issue: https://github.com/ooni/probe/issues/1845

internal/netxlite/certifi.go

@@ -1,5 +1,5 @@
 // Code generated by go generate; DO NOT EDIT.
-// 2021-12-06 16:54:29.970299 +0100 CET m=+1.432552960
+// 2022-01-24 12:46:25.250293 +0100 CET m=+0.397835501
 // https://curl.haxx.se/ca/cacert.pem
 
 package netxlite