In OSASINFRA-3657 we have modified cloud-credential-operator to consume a CA cert from the root credentials secret and include it in the generated credentials secrets under a new key. We should now modify Hypershift to use the same secret key, cacert, rather than the one it currently uses, cabundle.pem.