shell: export guix’s SSL_CERT_{DIR,FILE} as needed