Rework build system for nexus clients

For nexus clients, there should be no distinction between prod and dev.

Add an optional CERT argument which defines where to find the public certificate.

If not defined, embed a dummy public certificate.