fix(ssl): Pass CA bundle env vars to curl on macOS

On macOS, sentry-cli links system libcurl which uses SecureTransport as
its TLS backend. SecureTransport ignores SSL_CERT_FILE, so custom CA
bundles (e.g. corporate MITM proxies) don't work even though
openssl_probe sets the env var. This reads SSL_CERT_FILE (or
CURL_CA_BUNDLE) back and passes it via CURLOPT_CAINFO, which
SecureTransport does honor.

Generated with AI

Co-Authored-By: Claude Code

Author: chris-smith-zocdoc

src/api/mod.rs

@@ -242,6 +242,12 @@ impl Api {
         handle.ssl_verify_host(self.config.should_verify_ssl())?;
         handle.ssl_verify_peer(self.config.should_verify_ssl())?;
 
+        if let Ok(ca_bundle) = std::env::var("SSL_CERT_FILE") {
+            handle.cainfo(&ca_bundle)?;
+        } else if let Ok(ca_bundle) = std::env::var("CURL_CA_BUNDLE") {
+            handle.cainfo(&ca_bundle)?;
+        }
+
         let env = self.config.get_pipeline_env();
         let headers = self.config.get_headers();