Add cert-manager CRDs

Since the upgrade to helm 3, the cert-manager custom resource definitions are not installed anymore. I thought that with helm 3 these would be installed from the crd directory that is in cert-manager's helm chart, but apparently they aren't, so we'll have to return to installing them from ansible/kubectl instead, as we did before.