k8s: use --wait for cert-manager and api-gateway

This instructs helmfile/helm to don't return until all resources are up and running, which hopefully reduces race conditions on interdependant resources.

Bug: T338158 Signed-off-by: Arturo Borrero Gonzalez aborrero@wikimedia.org