With the latest iteration on the install_ca role, we're now able to deploy a CA using a remote file.

This has to be used in the reproducer role, in replacement of the cifmw_reproducer_internal_ca parameter, which installs the CA RPM with all of its useless dependencies (java, among them).

The goal is to:

• chase down mentions of that parameter
• ensure install_ca role is called instead (beware, it's not a 1:1 replacement, it may be already called, like for the configure_computes.yml)
• add an early check in the reproducer role, to ensure the parameter isn't set anymore
• fail with a meaningful message about "deprecated, use [....] to consume [...]" - while not leaking internal URI (maybe point "downstream doc", and nudge a new FAQ entry?) (use ansible.builtin.assert - it's cleaner than ansible.builtin.fail with a when condition)

From what I can see, there aren't that many calls to this parameter:
roles/reproducer/tasks/rhos_release.yml: name: "{{ cifmw_reproducer_internal_ca }}"

so the game is to check where that rhos_release.yml is called, and see if the install_ca is called instead.

The same chance would be needed in the DS doc, replacing the deprecated parameter by the new one from install_ca