branding: update local ca-certificates directory permissions

branding/tasks/main.yml

@@ -46,8 +46,8 @@
     path: /usr/local/share/ca-certificates
     state: directory
     owner: root
-    group: root
-    mode: '0755'
+    group: staff
+    mode: '02775'
     recurse: true
   tags:
     - branding