fix(test): install RPMs before generating service certificates

run_test() (test/ci/test-onboarding.sh) generated service certificates
before installing go-fdo-client/go-fdo-server. That ordering never
mattered for the default generate_service_certs(), which just runs
openssl locally with no dependency on either package being installed.

test/rpm/test-onboarding-defaults.sh overrides generate_service_certs()
to instead call the go-fdo-server RPM's own
/usr/libexec/go-fdo-server/generate-go-fdo-server-certs.sh, which only
exists after install_server() has installed the package. Because
run_test() called it first, the override always failed with
"command not found", and every step downstream failed in turn.

Swap the two steps: install_client/install_server now run before
generate_service_certs. Safe for every existing caller of this shared
run_test(), since neither direction of dependency exists for the
default cert generation.

Assisted-by: Claude (claude-sonnet-5)
Signed-off-by: Mario Cattamo <mcattamo@redhat.com>

Author: mcattamoredhat

test/ci/test-onboarding.sh

@@ -16,15 +16,15 @@ run_test() {
   log_info "Creating directories"
   create_directories
 
-  log_info "Generating service certificates"
-  generate_service_certs
-
   log_info "Build and install 'go-fdo-client' binary"
   install_client
 
   log_info "Build and install 'go-fdo-server' binary"
   install_server
 
+  log_info "Generating service certificates"
+  generate_service_certs
+
   log_info "Configuring services"
   configure_services