fix: update ENC script CA certificate path

- Mount vault-ca-cert secret at /opt/vault-ca-cert.crt in both deployments
- Update cobbler-enc script to use correct CA certificate path
- Resolves OSError about missing TLS CA certificate bundle

apps/base/puppet/deployment_puppetserver-compiler.yaml

@@ -96,6 +96,9 @@ spec:
           readOnly: true
         - mountPath: /opt/bin/
           name: puppet-shared-bins
+        - mountPath: /opt/vault-ca-cert.crt
+          name: vault-ca-cert
+          subPath: ca.crt
       initContainers:
       - name: copy-configmaps
         image: busybox:1.35
@@ -229,5 +232,8 @@ spec:
       - name: puppet-shared-bins
         persistentVolumeClaim:
           claimName: puppet-shared-bins
+      - name: vault-ca-cert
+        secret:
+          secretName: vault-ca-cert
   strategy:
     type: RollingUpdate