fix opensearch client certificate

[butonic]

We now expect the SEARCH_ENGINE_OPEN_SEARCH_CLIENT_CA_CERT env var to be a path to a certificate in pem format, rather than a byte[] (which won't work with env vars).