src: handle DER decoding errors from system certificates

[joyeecheung]

When decoding certificates from the system store, it's not actually guaranteed to succeed. In case the system returns a certificate that cannot be decoded (might be related to SSL implementation issues), skip them.

Refs: microsoft/vscode#277064

[nodejs-github-bot]

Review requested:

• @nodejs/crypto

[joyeecheung]

Drive-by: I added a skip here too, otherwise the code operating on that array below can crash (I think it's possible on a super duper fresh machine with zero certificates, for example - though most consumer macOS machines seem to have at least some preinstalled, or when there's some permission issue going on)

[nodejs-github-bot]

CI: https://ci.nodejs.org/job/node-test-pull-request/70256/

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.53%. Comparing base (0b6ae6d) to head (8bb2f41).
⚠️ Report is 5 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #60787      +/-   ##
==========================================
+ Coverage   88.04%   88.53%   +0.49%     
==========================================
  Files         703      703              
  Lines      208260   208260              
  Branches    40068    40149      +81     
==========================================
+ Hits       183360   184393    +1033     
+ Misses      16840    15878     -962     
+ Partials     8060     7989      -71     

Files with missing lines	Coverage Δ
src/crypto/crypto_context.cc	68.50% <ø> (ø)

... and 100 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.