Fix step-ca root CA access on Linux CI

Host chmod cannot open 0700 dirs owned by UID 1000, so
`-f` never sees root_ca.crt. Chmod from inside the
container as root while waiting for the cert.

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/certmanager/provision_worker.go

@@ -296,6 +296,7 @@ func (h *provisionHandler) skipsDNSChecks(
 	}
 
 	domain := &coredata.CustomDomain{}
+
 	err := domain.LoadByDomain(ctx, conn, coredata.NewNoScope(), hostname)
 	if errors.Is(err, coredata.ErrResourceNotFound) {
 		return true, nil