[backport-1.6] backup: pass s3 cert as raw pem

related to sylva-projects/sylva-core#4266 (closed)

backport of backup.yml from MRs

• !453 (merged)
• !451 (merged)