Currently `cert-manager` is deployed with `kubectl` using [static manifests](https://cert-manager.io/docs/installation/kubectl/). Automate this deployment via Flux or some other method that's codified.