cert debug endpoint returns certificate from filesystem rather than potentially stale in-use cert

Currently our cert debug endpoint loads the keystore fresh everytime, which is a little confusing as the mounted secret could be updated without the updated keystore getting loaded into the app.

Instead, we should load the keystore on startup and return the cached information from it instead.