For those that follow, I finally resolved this communication challenge between System.cmd and psql by setting the root CA via the PGSSLCert environment variable and forgoing the others. Also, it helped to exclude the .crt suffix.
{“PGSSLCERT”, “/etc/db/root”}
I documented this entire saga here Accelerate Multitenant Migrations with Schema Snapshots
