Ability to have the option to keep/remove roots from chain

[justai-net]

Is your feature request related to a problem? Please describe.
Currently, when using VaultPKISecret, the Root CA is being removed without the option to keep it as part of the ca_chain.

Describe the solution you'd like
Add to the spec, the option to keep/remove roots from chain.

Describe alternatives you've considered
N/A

Additional context
N/A

[waza-ari]

Alternatively, have the root CA available in the same secret, but not necessarily merged into the files.