Always copy cert generation scripts to first etcd (#11616)

If we don't, existing installation would not pick up fix to that script,
such as dc33a197.

Co-authored-by: Max Gautier <mg@max.gautier.name>