We have metrics that inform us how long until certs will expire in content-sources, and an alert that triggers when any of these reach 30 days or less.

We should add the same in patchman-engine since it also depends on the same candlepin cert.

also update the SOP in app interface to mention updating the patch secrets too