fix(cache): stop requiring unused S3 CA secret

Summary

• Remove S3_CA_CERT_PEM from the cache Kamal secret list for managed deployments.
• Keep custom S3 CA support optional at runtime instead of requiring the secret during deploy config resolution.
• Fix cache deploy failures in environments where S3_CA_CERT_PEM is not configured.

Testing

• Not run (not requested)

No GitHub comments yet.