Honor ca_tag in container bind mounts of service_credentials

roles/float-base-docker/templates/run.sh.j2

@@ -79,7 +79,8 @@
 
 {# Mount the service credentials inside the container. #}
 {% for creds in services[item.service].get('service_credentials', []) %}
-  {{ opt('mount', 'type=bind,source=/etc/credentials/x509/' + creds.name + ',destination=/etc/credentials/x509/' + creds.name) }}
+  {%- set credentials_path='/etc/credentials/' + (creds.ca_tag | default('x509')) + '/' + creds.name %}
+  {{ opt('mount', 'type=bind,source=' + credentials_path + ',destination=' + credentials_path) }}
 {% endfor %}
 
 {# Security options (unless root=True) #}