main pico / cmd / scripts / sync-certs