ipatests: mark xfail tests using sssctl domain-status
    
    In fedora 37+, sssctl domain-status is failing.
    Mark xfail the gating tests impacted by this issue, to avoid
    breaking the CI gating when we move to f37.
    
    Related: https://pagure.io/freeipa/issue/9234
    Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
    Reviewed-By: Alexander Bokovoy <abbra@users.noreply.github.com>
    Reviewed-By: Stanislav Levin <slev@altlinux.org>