Add integration tests for ACME and OCSP renewals

There are a lot of corner cases with these things, since they are both concurrent, and on different schedules, and involve the filesystem. We should go through, try and understand what all the corner cases are, and write tests for them. Split off from #93.

The issue names no files or tests; start by reviewing the renewal implementation and the context in #93. Identify corner cases involving concurrent ACME and OCSP schedules and filesystem state, then add integration coverage demonstrating those cases and confirming both renewal flows behave correctly.

Written by the indexing model from the issue text.