Custom or disabled SSL verification for `files.download`

[themanifold]

Some endpoints, especially internal corporate endpoints, have self signed or custom CAs that the person issuing pyinfra does not have.

Add 2 options:

• Disable verification of SSL certifications (curl -k etc)
• Custom certification location

The workaround right now being to execute curl explicitly within the server.shell command.