fm: add certificate diagnosis engine for expiring silo TLS certificates - #11238

control: job assigned to worker 01M1QDX1A9B1RSXGH8BYD9G2VV [factory aws, i-00b32b9a8481ffea9] (queued for 48 s)
...
task: starting task 0: "setup"
task: process exited: duration 4118 ms, exit code 0
...
task: starting task 1: "rust-toolchain"
task: process exited: duration 18494 ms, exit code 0
...
task: starting task 2: "authentication"
task: process exited: duration 16 ms, exit code 0
...
task: starting task 3: "clone repository"
task: process exited: duration 14089 ms, exit code 0
...
task: starting task 4: "build"
...
|  Documenting omicron-uuid-kinds v0.1.0 (/work/oxidecomputer/omicron/uuid-kinds)
|  Documenting dev-tools-common v0.1.0 (/work/oxidecomputer/omicron/dev-tools/common)
|     Finished `dev` profile [unoptimized + debuginfo] target(s) in 7m 55s
| warning: the following packages contain code that will be rejected by a future version of  [...]
| note: to see what the problems were, use the option `--future-incompat-report`, or run `ca [...]
|    Generated /work/oxidecomputer/omicron/target/doc/api_identity/index.html and 205 other  [...]
| 
| real     7:56.095731286
| user    21:15.439992426
| sys      4:30.714947247
| trap        0.312695250
| tflt        0.037410525
| dflt        0.217417167
| kflt        0.000053990
| lock  7:37:50.598789150
| slp   2:40:39.968745250
| lat        37.991258999
| stop     2:06.333636414
task: process exited: duration 868784 ms, exit code 0
|W| found 0 output files