Fix step-ca root CA access on Linux CI

Host chmod cannot open 0700 dirs owned by UID 1000, so
`-f` never sees root_ca.crt. Chmod from inside the
container as root while waiting for the cert.

Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/iam/oauth2/discovery.go

@@ -84,6 +84,7 @@ func AuthorizationURLWithQuery(
 	}
 
 	merged := u.Query()
+
 	for key, values := range query {
 		for _, value := range values {
 			merged.Add(key, value)

pkg/iam/oauth2/service.go

@@ -1547,6 +1547,7 @@ func (s *Service) Authorize(
 				}
 			} else {
 				var existingConsent coredata.OAuth2Consent
+
 				skipConsent = existingConsent.LoadMatchingConsent(
 					ctx,
 					tx,