CLOUD-4745: ensure certificates are up to date

[pb-dod]

The certificates step wasn't detecting when updates were needed on existing systems. This became apparent when @hochdave encountered issues where his system had outdated certificates, but ih-setup's test function wasn't detecting this and triggering an update.

Specifically, this manifested as an issue @hochdave had with NODE_EXTRA_CA_CERTS pointing to an outdated certificate path, causing npm install failures.

Solution

Added file comparison checks to ensure both the certificates and their configuration files match their source versions. If either is out of date, the step will trigger a reinstall.

Changes include:

• Moving path variables to the top level for consistency and reuse
• Adding diff checks in the test() function to compare installed files with their sources
• Using consistent variable names throughout the script
• Ensuring both the CA certificate and the configuration script are checked

Testing

Tested using the isolated environment test script. Verified that:

• Out-of-date certificates trigger a reinstall
• Modified configuration files trigger a reinstall
• Up-to-date installations pass normally

[pb-dod]

Added this to fix this error while testing with ./meta/test-isolated:

cp: /tmp/ih-core-test/.ih/default/11_certificates.sh: No such file or directory