Provide trusted metrics TLS configuration

[caxu-rh]

Add a complete production metrics TLS overlay. It must create or reference a trusted certificate, configure the manager mount and metricsCertPath, set ServiceMonitor serverName and CA references, and remove the need for insecureSkipVerify. Add build or integration validation for the overlay.\n\nCurrent templates: config/prometheus/monitor_tls_patch.yaml and config/default/cert_metrics_manager_patch.yaml