docs/pki: add remove_roots_from_chain option to /pki/issue (#21161) (#…

…21193)

Adds the `remove_roots_from_chain` option to the docs for
`/pki/issue`, based on addNonCACommonFields().

website/content/api-docs/secret/pki.mdx

@@ -291,6 +291,10 @@ It is suggested to limit access to the path-overridden issue endpoint (on
   `YYYY-MM-ddTHH:MM:SSZ`. Supports the Y10K end date for IEEE 802.1AR-2018
   standard devices, `9999-12-31T23:59:59Z`.
 
+- `remove_roots_from_chain` `(bool: false)` - If true, the returned `ca_chain`
+  field will not include any self-signed CA certificates. Useful if end-users
+  already have the root CA in their trust store.
+
 #### Sample Payload
 
 ```json