feat(helm): cert-manager external issuer + OpenShift passthrough Route (#2468)