minor updates to apt instructions

- ca-certificates are needed for the wget of a https URL to work
- pass -y to the foreman-installer installation