Ensure to include the cacert in the clouds.yaml created and encoded for capo

Created by: garloff

As creator of a cluster, I expect the tooling to properly take care of a custom CA (cacert setting) when producing a clouds.yaml entry with the cluster-specific application credential, which then gets encoded for capo to talk to the OpenStack API.