BED-4976: Fix EnrollOnBehalfOf logic issue

[JonasBK]

Description

Fixed a bug in the EnrollOnBehalfOf logic.

We now correctly check if the CA of the first CertTemplate is trusted for NTAuth.

Fixed harness tests to account for this as well.

Motivation and Context

This PR addresses: BED-4976

How Has This Been Tested?

Fixed harness tests for EnrollOnBehalfOf.

Checked that the edge is still generated and composition works for ESC3 with this dataset:
20231208161111_BloodHound.zip

Screenshots (optional):

Types of changes

• Bug fix (non-breaking change which fixes an issue)

Checklist:

• I have met the contributing prerequisites
  • Assigned myself to this PR
  • Added the appropriate labels
  • Associated an issue: Issues and Pull Requests README #672
  • Read the Contributing guide: https://github.com/SpecterOps/BloodHound/wiki/Contributing
• I have ensured that related documentation is up-to-date
  • Open API docs
  • Code comments (GoDocs / JSDocs)
• I have followed proper test practices
  • Added/updated tests to cover my changes
  • All new and existing tests passed