Enable and use cert-manager for handling certificates

[stvoutsin]

Currently certs are generated manually and installed into the RSP.
Can this be done in an automated way?
RSP ships with the cert-manager which is disabled in the roe env so we handle upgrades manually as well.

TODO:
Look into cert-manager, enable it and document how we can use it to replace manual processes

[gpfrancis]

Currently investigating whether we can get an AWS account so that we can use route 53, which is likely by far the quickest and simplest option if so.

[markgbeckett]

To progress this requires AWS access.

[markgbeckett]

Issue with Nublado, tracked down to Vault token. @stvoutsin to document token rotation to simplify resolution in the future. However, Stelios believed this was a one-time fix, so shouldn't reoccur.

[gpfrancis]

Successfully tested using the Route53 method. Instructions for configuration documented here: https://github.com/lsst-uk/rsp-uk-docs/wiki/Configuring-cert%E2%80%90manger

[tms-epcc]

15/FEB/24
@gpfrancis reported

• Proof of Concept that uses Let' Encrypt to issue SSL certs is now working
• but it is hard-coded to use EPCC's AWS
• Need own AWS account
• @markgbeckett has action to speak to Sean McG about this