fix: update ENC script CA certificate path (#62)

- Mount vault-ca-cert secret at /opt/vault-ca-cert.crt in both deployments
- Update cobbler-enc script to use correct CA certificate path
- Resolves OSError about missing TLS CA certificate bundle

Reviewed-on: #62

apps/base/puppet/resources/cobbler-enc

@@ -20,7 +20,7 @@ def fetch_enc_data(cobbler_url: str, hostname: str) -> str:
     """
     url = f"{cobbler_url}/cblr/svc/op/puppet/hostname/{hostname}"
     try:
-        response = requests.get(url, verify='/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem')
+        response = requests.get(url, verify='/opt/vault-ca-cert.crt')
         response.raise_for_status()
     except requests.RequestException as e:
         sys.exit(f"Request failed: {e}")