Create certificate renewal tasks for SREs before expirations lapse

Your expiring TLS certificates sit untracked across providers, causing missed renewals and service interruptions. SREs receive prioritized renewal tickets with due dates and runbook links to prevent outages before renewals lapse.