packaging: setup: libvirt and system PKI

Copy generated vdsm pki also to libvirt.

Copy generated vdsm cacert to system-wide /etc/pki/CA/cacert.pem .

Reorder so that vdsm pki generation happens before configuring libvirt
for vdsm, so that it's configured with tls.

Fix selinux contexts for libvirt-spice pki if enabled.

Bug-Url: https://bugzilla.redhat.com/1034634
Change-Id: I74f44c46e6720ca8c62af1afa6df4a5d7c013b49
Signed-off-by: Yedidyah Bar David <didi@redhat.com>