Move retired CA certs to optional array

Move 27 retired CA root certificates from CERTIFICATE_DATA to
OPTIONAL_CERTIFICATE_DATA in android12L-tests-dev to allow newer
Conscrypt mainline modules containing updated root CA certificates to
pass CTS on older Android 12L platform releases.

Bug: 528182750
Test: atest CtsSecurityTestCases
Flag: EXEMPT TEST_ONLY
Merged-In: Id233877a29147361d9b333165306dffdd9ef2ef8

Change-Id: Icb29cdb70e5919f52ed3f9e33cc738b1ee706ca8