refactor: remove deprecated certificate management playbooks and hooks

ansible/certbot/renewal-hook.sh.j2

@@ -10,8 +10,9 @@
 
 set -euo pipefail
 
-CERT_NAME="{{ certbot_cert_name }}"
-CERT_DIR="{{ certbot_directory }}/config/live/${CERT_NAME}"
+# RENEWED_LINEAGE is set by certbot --deploy-hook or passed explicitly by deploy.yml
+CERT_DIR="${RENEWED_LINEAGE:?RENEWED_LINEAGE must be set}"
+CERT_NAME=$(basename "${CERT_DIR}")
 HAPROXY_CERT="{{ haproxy_cert_path }}"
 HAPROXY_DIR="{{ haproxy_directory }}"