In OSASINFRA-3657 we have modified cloud-credential-operator to consume a CA cert from the root credentials secret and include it in the generated credentials secrets under a new key. We should now modify MAPO to consume the CA cert from this location rather than from the openshift-config / cloud-provider-config config map. This has the added bonus of aligning MAPO with CAPO's behavior.