[adr] stop service while waiting for cert

[sed-i]

This PR adds an ADR for plain http vs TLS in the time window between a tls-certificates is formed and until the server cert is available on disk.

Tandem PRs:

• https://github.com/canonical/loki-k8s-operator/pull/416