ipatests: mark xfail tests using sssctl domain-status
    
    In fedora 37+, sssctl domain-status is failing.
    Mark xfail the gating tests impacted by this issue, to avoid
    breaking the CI gating when we move to f37.
    
    Related: https://pagure.io/freeipa/issue/9234
    
    Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>