Proper way to generate user certs from cockroach generated CA

**Is your feature request related to a problem? Please describe.**
The issue I'm having is generating new db users and creating the relative certificates and then distributing them. with self hosted cockroachdb

**Describe the solution you'd like**
A CR to handle users and authentication kind: CrdbUser (?)

**Describe alternatives you've considered**
Better explanation with the current tools on how to handle the creation and then the distribution of certificates at large scale.

**Additional context**
At the moment the things I do to generate a certificate with the cockroachdb self signed ca are:
- create a crdb-client-secure pod with the following piece added:
```
- secret:
name: cockroachdb-root
items:
- key: tls.crt
path: client.root.crt
- key: tls.key
path: client.root.key
- key: ca.crt
path: ca.crt
```
ca.crt is taken from the cockroachdb-root secret

- login as root, create user xyz, grant permission
- create a folder 'certs'
- create the certs via cockroach certs
- cat of each cert created and saving it on my machine to distribute them
This feels super weird to do and I extensively read the documentation but haven't found any better way. This isn't in the documentation aswell and I came up with this after many attempts.

Jira issue: CRDB-29961