feat(helm): fix postgres client cert setup

[slonka]

Postgres CertPath and KeyPath are only required when the server requires authentication. This PR fixes the description and splits root ca bundle and key/cert secrets.

Changelog: fix(helm): postgres client cert setup

Checklist prior to review

• Link to relevant issue as well as docs and UI issues --
• This will not break child repos: it doesn't hardcode values (.e.g "kumahq" as a image registry) and it will work on Windows, system specific functions like syscall.Mkfifo have equivalent implementation on the other OS --
• Tests (Unit test, E2E tests, manual test on universal and k8s) --
• Do you need to update UPGRADE.md? --
• Does it need to be backported according to the backporting policy? --
• Do you need to explicitly set a > Changelog: entry here or add a ci/ label to run fewer/more tests?