Add optional cert-manager into workload cluster

Created by: garloff

Having a cert-manager is a common requirement, so add an option to deploy it along with the test workload cluster.