Fix step-ca root CA access on Linux CI

Host chmod cannot open 0700 dirs owned by UID 1000, so
`-f` never sees root_ca.crt. Chmod from inside the
container as root while waiting for the cert.

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/complianceportal/visitor/document_service.go

@@ -290,13 +290,10 @@ func (s *Service) generateDocumentPDFOnTheFly(
 		fileRecord := &coredata.File{}
 
 		fileErr := s.pg.WithConn(
-
 			ctx,
-
 			func(ctx context.Context, conn pg.Querier) error {
 				return fileRecord.LoadByID(ctx, conn, scope, *organization.HorizontalLogoFileID)
 			})
-
 		if fileErr == nil {
 			base64Data, mimeType, logoErr := s.fileManager.GetFileBase64(ctx, fileRecord)
 			if logoErr == nil {