Add RootCARotationPoller to CertClient

As the final step for Root CA rotation, the RootCARotationPoller needs to be integrated into the certificate client. With this, the polling mechanism should be kicked off once the client starts, and the root CA rotation should be automatically handled.