[COOK-3561] Support out of band SSL certificates in openldap::server

Support providing your SSL certificates outside of the openldap cookbook. Uses openldap[:mange_ssl] to trigger this, defaulting to the current behavior.

Tests will fail without COOK-3543.