Fix and improve DCM CSR handling and /update operation

Key changes:

1. use same CSR for previously deployed clusters

2. for the subresource/approval key, follow the reference

   • needed to call the AddResoureStatus before applying to get the reference key added first

3. Don't change the statusContextId during update in DCM

4. Add an example test case

5. Fix private key generation for logical cloud to make sure it gets used by any and all CSRs

6. Fix Logical Cloud deletion after update

Fixes #154 (closed)