refs #7558 - deploys katello CA cert to pub directory

The websockify tool, which runs as Foreman, needs to be able to read the Apache key. There's not a way around this for now, unless Foreman changes how they setup these tunnels.