[#53062579] place github.gds cert on slaves gh-tools can call back

The Puppet branches Jenkins job calls back to github.gds via gh-tools. We need to below config + some manual config for this to work (documentation in progress).

/cc @dcarley @jgumbley