Allow use of self-signed certificates for an OIDC provider

[MikeEdgar]

PR #1126 does not allow using self-signed certificates with the OIDC provider. We should allow trusted certificates to be configured, which requires the certificates to be passed to the UI server in PEM format, and the API server directly as input. The API server will then convert to a JKS written to temporary file to be passed to the OIDC tenant configuration. This step should not be required in the next Quarkus LTS.

CR Input	UI	API
PEM	same as input	same as input
JKS	Convert to PEM	same as input
P12	Convert to PEM	same as input