Move mTLS CA cert mount out of /etc/nginx to avoid agent backup failure

Move mTLS CA cert mount out of /etc/nginx to avoid agent backup failure #1249