RFR: 8320362: Load anchor certificates from Keychain keystore [v9]

[Alexey Bakhtin]

> Please review the proposed fix.
> 
> The patch loads system root certificates from the MacOS Keychain with TrustSettings.
> It allows to build a trusted certificate path using the MacOS Keychain store only.

Alexey Bakhtin has refreshed the contents of this pull request, and previous commits have been removed. The incremental views will show differences compared to the previous content of the PR. The pull request contains one new commit since the last revision:

  Add HttpsURLConnectionTest test

-------------

Changes:
  - all: https://git.openjdk.org/jdk/pull/16722/files
  - new: https://git.openjdk.org/jdk/pull/16722/files/507a636a..e2237c72

Webrevs:
 - full: https://webrevs.openjdk.org/?repo=jdk&pr=16722&range=08
 - incr: https://webrevs.openjdk.org/?repo=jdk&pr=16722&range=07-08

  Stats: 14 lines in 1 file changed: 3 ins; 3 del; 8 mod
  Patch: https://git.openjdk.org/jdk/pull/16722.diff
  Fetch: git fetch https://git.openjdk.org/jdk.git pull/16722/head:pull/16722

PR: https://git.openjdk.org/jdk/pull/16722