local-unbound-setup: If TLS is enabled, use the certificate bundle

Now that certctl(8) always produces a bundle, use it in preference to
the hashed directory, since the latter cannot be preloaded before
chrooting.