fix: use networking ns for cert manager secret

tmpl/cluster/cert-manager-secret.sops.yaml

@@ -3,6 +3,6 @@ apiVersion: v1
 kind: Secret
 metadata:
   name: cloudflare-api-key
-  namespace: kube-system
+  namespace: networking
 stringData:
     api-key: ${BOOTSTRAP_CLOUDFLARE_APIKEY}