Add missing Build-Depends; of these ca-certificates is needed for tests only. Now sbuild -d unstable goes through.