Clarify differences between example configs for CA issuer and cluster CA issuer

[apiwat-chantawibul]

• Especially around the issue that CA root secret has to be in cert-manager namespace.
• Previous version starts off by suggesting the differences is only in "the last step" when in fact CA root secret has also moved to another namespace.

Might need further correction

• [ ] Is the namespace for CA root secret always assumed to be cert-manager when creating cluster CA issuer?
  • What happens if cert-manger is not installed in cert-manager namespace?
  • I don't know these so I didn't write more specifically in the edit.

[netlify[bot]]

✅ Deploy Preview for cert-manager ready!

Built without sensitive environment variables

Name	Link
🔨 Latest commit	df93cfa6b2485e1443989a38a5ad910978a9f080
🔍 Latest deploy log	https://app.netlify.com/sites/cert-manager/deploys/6695ef972d2f090008bb89f5
😎 Deploy Preview	https://deploy-preview-1516--cert-manager.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[cert-manager-prow[bot]]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: erikgb

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• ~~OWNERS~~ [erikgb]

Approvers can indicate their approval by writing /approve in a comment Approvers can cancel approval by writing /approve cancel in a comment