Clarify differences between example configs for CA issuer and cluster CA issuer

[apiwat-chantawibul]

• Especially around the issue that CA root secret has to be in cert-manager namespace.
• Previous version starts off by suggesting the differences is only in "the last step" when in fact CA root secret has also moved to another namespace.

Might need further correction

• [ ] Is the namespace for CA root secret always assumed to be cert-manager when creating cluster CA issuer?
  • What happens if cert-manger is not installed in cert-manager namespace?
  • I don't know these so I didn't write more specifically in the edit.

[cert-manager-prow[bot]]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Once this PR has been reviewed and has the lgtm label, please assign jakexks for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/cert-manager/website/blob/master/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment

[netlify[bot]]

✅ Deploy Preview for cert-manager ready!

Built without sensitive environment variables

Name	Link
🔨 Latest commit	df93cfa6b2485e1443989a38a5ad910978a9f080
🔍 Latest deploy log	https://app.netlify.com/sites/cert-manager/deploys/6695ef972d2f090008bb89f5
😎 Deploy Preview	https://deploy-preview-1516--cert-manager.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.