Create certificate record when completion tag applied

Completion tags sometimes have no matching certificate in the registration system, delaying verification and reporting. It creates the certificate entry and saves the access token so coordinators can confirm credentials same day.