Installing trust store does not work for opendoas instead of sudo

I have `opendoas` instead of `sudo`, and this causes `mkcert -install` to fail:

```
Created a new local CA 💥
ERROR: failed to execute "tee": exit status 1

sudo: invalid option -- '-'
usage: doas [-Lns] [-C config] [-u user] command [args]
```

Can the implementation be updated to support multiple 'sudo' programs?

Start by tracing the `mkcert -install` command's privilege escalation path and reproduce the failure with `opendoas` instead of `sudo`. The work is done when trust-store installation succeeds with both supported privilege-elevation programs; the payload does not name a source file or test.

Written by the indexing model from the issue text.