ShortCertRotation featuregate updates certificate lifetime, so instead of 5 years signer lifetime its set to 4 hours. This causes the alert to fire, as it expects it to expire soon.

Instead we should:

• expose target cert / signer lifetime as a metric
• rework alerts to use this metric as a source. The alert should fire when 80% of lifetime approaches instead of hardcoded value.