The install.sh downloads the upstream cert-manager bundle at deploy time:

  curl -fsSL https://github.com/cert-manager/cert-manager/releases/download/{{CERT_MANAGER_VERSION}}/cert-manager.yaml

No pre-downloaded YAML is required. If offline deploy is needed, place cert-manager.yaml here
and install.sh will skip the download step (file presence check).