Add option to CRD for configurable CA certificate settings

Current behaviour

If a custom CA certificate is used to sign the OpenID Provider's certificate then Zync needs to be configured with the relevant certificate also. This can be done with some manual steps as described in this KCS

Expected behaviour

Configuring the correct certificate when a custom CA certificate is used should be possible directly in the operator CRD via configuring some parameters and secret(s) to mount the certificate in.