Trust Russian CA for MAX API

Dockerfile

@@ -6,12 +6,20 @@ WORKDIR /app
 
 # Install system dependencies
 RUN apt-get update && apt-get install -y \
+    ca-certificates \
     postgresql-client \
     curl \
     ffmpeg \
     git \
     && rm -rf /var/lib/apt/lists/*
 
+RUN mkdir -p /usr/local/share/ca-certificates/russian-trusted \
+    && curl -fsSLk https://gu-st.ru/content/lending/russian_trusted_root_ca_pem.crt \
+        -o /usr/local/share/ca-certificates/russian-trusted/russian_trusted_root_ca_pem.crt \
+    && curl -fsSLk https://gu-st.ru/content/lending/russian_trusted_sub_ca_pem.crt \
+        -o /usr/local/share/ca-certificates/russian-trusted/russian_trusted_sub_ca_pem.crt \
+    && update-ca-certificates
+
 # Copy the local Telegram Bot API binary and its musl runtime from the official aiogram image.
 COPY --from=telegram-bot-api /usr/local/bin/telegram-bot-api /usr/local/bin/telegram-bot-api
 COPY --from=telegram-bot-api /lib/ld-musl-x86_64.so.1 /lib/ld-musl-x86_64.so.1