Update expiry records for on-call engineers before renewals

Your certificate failure alerts arrive in a shared channel, causing missed renewals and emergency patches. Engineers see prioritized expiry records and sheet updates so renewals are confirmed before the next billing run.