Fix dev_setup CA setup

It turned out that the current way to create the CA with openssl isn't working anymore with recent client versions. They don't trust the CA because some critical fields are not set up correctly.

Instead of messing with the openssl CLI, we instead let cert-manager handle the CA.