Drop CA injection controller and use cert-manager's CA Injector instead

[simu]

Summary

Currently the k8s-service-ca-controller brings its own ConfigMap controller which injects the service CA cert into configmaps with a certain label. We can drop this and instead document how users can use https://cert-manager.io/docs/concepts/ca-injector/.