gitops now processes Android certificates before Android profiles

[getvictor]

Related issue: Resolves #42405

Also, fixed bug with this edge case: Certificate removed while ONC profile is withheld

Checklist for submitter

• Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes.

Testing

• Added/updated automated tests
• QA'd all new/changed functionality manually

[codecov]

Codecov Report

❌ Patch coverage is 88.88889% with 2 lines in your changes missing coverage. Please review.
✅ Project coverage is 66.85%. Comparing base (e97d423) to head (f9d95d8).
⚠️ Report is 103 commits behind head on victor/42405-android-onc.

Files with missing lines	Patch %	Lines
...rver/datastore/mysql/host_certificate_templates.go	77.77%	1 Missing and 1 partial ⚠️

Additional details and impacted files

@@                    Coverage Diff                    @@
##           victor/42405-android-onc   #43080   +/-   ##
=========================================================
  Coverage                     66.85%   66.85%           
=========================================================
  Files                          2580     2580           
  Lines                        206993   206990    -3     
  Branches                       9277     9277           
=========================================================
- Hits                         138381   138380    -1     
+ Misses                        56033    56031    -2     
  Partials                      12579    12579           

Flag	Coverage Δ
backend	68.63% <88.88%> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[claude]

Claude Code Review

This repository is configured for manual code reviews. Comment @claude review to trigger a review and subscribe this PR to future pushes, or @claude review once for a one-time review.

_{Tip: disable this comment in your organization's Code Review settings.}