recovery: add additional tools/packages

[zdykstra]

• ca-certificates so cURL supports SSL/TLS
• wipefs so a disk can be completely trashed
• sgdisk, possibly replacing gdisk

[ahesford]

I'd like to see zbm-kcl (especially the new one in #401) in all images by default, because people can use that in the recovery shell to edit KCL options for boot environments. When the new one is merged, we can also include objcopy to allow edits to EFI executables, but that is probably only useful for images that can mount FAT filesystems.

[csarn]

I would even suggest to include the void package manager, so anything you might need in the recovery environment can just be installed into the ramdisk.