Add option to reissue external API certificate that matches the original cluster's DNS name

[javipolo]

After having a conversation with @omertuc and @eranco74 we decided that the certificate generation should happen in the edge configuration step

So for now we will be running this script as part of the create-config step, but when possible the functionality will be moved to the relocation-operator/reconfiguration service