* adds a server cert from the mtls CA for mtls clients
* adds gost as a tls offload for non-mtls clients to work
around https://github.com/eclipse/mosquitto/issues/1839
* adds wildcard-tls through external secrets and removes
template operator version
* removes non-working websockets listener
* fixes tests to work with mtls and non-mtls
