allow self signed certificate in runner registration

The configmap calls /entrypoint register but there is no way to call --tls-ca-file

The pod doesn't start so it's not possible to provide it after the fact.