Force new root CA resource creation on out of band changes

[benashz]

This fix will trigger the recreation a pki_secret_backend_root_cert resource
for the following scenarios:

• the secret engine's mount has been removed
• the CA certificate has been regenerated outside of Terraform.

Community Note

• Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
• Please do not leave "+1" comments, they generate extra noise for pull request followers and do not help prioritize the request

Closes #939

Release note for CHANGELOG:

Output from acceptance testing:

$ make testacc TESTARGS='-run=TestAccXXX'
$ time make testacc TESTARGS='-v -test.run TestPkiSecretBackendRootCertificate_basic'

==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test -v -v -test.run TestPkiSecretBackendRootCertificate_basic -timeout 30m ./...

ok      github.com/hashicorp/terraform-provider-vault/util      (cached) [no tests to run]
=== RUN   TestPkiSecretBackendRootCertificate_basic
--- PASS: TestPkiSecretBackendRootCertificate_basic (11.66s)
PASS
ok      github.com/hashicorp/terraform-provider-vault/vault     (cached)
make testacc TESTARGS='-v -test.run TestPkiSecretBackendRootCertificate_basic  4.29s user 4.48s system 132% cpu 6.621 total


...

[vinay-gopalan]

LGTM!