*Loki* now has a certificate signed by DCH CA R2, so the Promtail configuration needs updated to trust that root certificate.