Hotfix: renew SSL certificate in Pulumi

[jemrobinson]

✅ Checklist

• You have given your pull request a meaningful title (e.g. Enable foobar integration rather than 515 foobar).
• You are targeting the appropriate branch. If you're not certain which one this is, it should be develop.
• Your branch is up-to-date with the target branch (it probably was when you started, but it may have changed since then).

🚦 Depends on

n/a

⤴️ Summary

Adds a check for SSL certificate expiry date and marks the resource as needing an update if we are within 30 days of expiry.

🌂 Related issues

Contributes to #2361

🔬 Tests

Tested on a fresh SRE deployment

[github-actions]

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
data_safe_haven/external/api
azure_sdk.py					831, 1100
data_safe_haven/infrastructure/components/dynamic
ssl_certificate.py					66, 101, 124-126, 159, 174-179, 188-198
Project Total

This report was generated by python-coverage-comment-action

[JimMadge]

LGTM 👍

I changed the "Closes" because I think we still want a more robust solution here.