fix: Correct sync wave ordering for certificate dependency chain

Move nginx-ingress-pxe-boots from wave 1200 → 1100 so it creates tls-boots
secret BEFORE infra-onboarding (wave 1150) needs boots-ca-cert.

Wave ordering:
- 1100: nginx-ingress-pxe-boots creates tls-boots Certificate resource
- 1140: copy-ca-cert-boots-to-infra copies tls-boots → boots-ca-cert (ExternalSecret)
- 1150: infra-onboarding deploys with boots-ca-cert available for dkam

This fixes dkam CrashLoopBackOff due to missing /etc/ssl/boots-ca-cert/ca.crt

Author: sandeepbh5

argocd/applications/templates/nginx-ingress-pxe-boots.yaml

@@ -4,7 +4,7 @@
 
 {{- $appName        := "nginx-ingress-pxe-boots" }}
 {{- $namespace      := "orch-boots" }}
-{{- $syncWave       := "1200" }}
+{{- $syncWave       := "1100" }}
 ---
 {{- if (index .Values.argo.enabled $appName) }}
 apiVersion: argoproj.io/v1alpha1