[tls] introduce dedicated CA for libvirt and update default cert durations

[stuggi]

Adds a new CA dedicated for libvirt. This will be used for any libvirt/qemu certs on the dataplane side and in nova novncproxy for vencrypt to secure traffic to the vnc server.

Also updates CA/cert default duration

• CAs to be valid for 10 years
• libvirt certs valid for 5 years
• all other certs valid for 15months. Default renewBefore is 90days. With 15months the certs start to get rotated after one year.

Jira: OSPRH-6552

[openshift-ci[bot]]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: olliewalsh, stuggi

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/openstack-k8s-operators/openstack-operator/blob/main/OWNERS)~~ [olliewalsh,stuggi] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment