Make certifi optional/remove as dependency

[medzin]

raven-go dependency on gocertifi is really problematic in corporate networks (audits, sec teams etc.), because it introduces not company managed root CAs. Can this dependency be removed or made optional?

[mattrobenolt]

Would it help if it were vendored instead?

[medzin]

The problem is that raven-go uses by default it's own root CAs provided by gocertifi, not root CAs installed in operating system and controlled by sec teams.

[mattrobenolt]

I see. I can probably easily make this a configuration option to override or supply your own bundle. fwiw we do this as well in raven-python. And for context, this was added for the exact opposite case, where there were no system roots.

[mattes]

I think this is highly problematic as @medzin already explained. As a work-around it seems as if I can attach my own Transport though.