check-certs task should automatically delete expired BOSH director and jumpbox certificates

We want to enhance the "check-certs" task so that it automatically deletes expired bbl certificates, according to the manual procedure we currently apply: https://github.com/cloudfoundry/relint-envs/tree/main#certificate-renewal.

The Concourse task could get a new parameter FILES_TO_AUTOMATICALLY_RENEW with a list of director and jumpbox vars store files, e.g.:

- environments/test/hermione/bbl-state/vars/director-vars-store.yml
- environments/test/hermione/bbl-state/vars/jumpbox-vars-store.yml
- environments/test/trelawney/bbl-state/vars/director-vars-store.yml
- environments/test/trelawney/bbl-state/vars/jumpbox-vars-store.yml
(...)

The cleaned up vars-store files would then be committed to the "relint-envs" repo. The next "update-infrastructure" job will recreate the missing certificates.

Start with the check-certs Concourse task and the certificate-renewal procedure linked in the issue. Review the listed director-vars-store.yml and jumpbox-vars-store.yml files and determine how the new FILES_TO_AUTOMATICALLY_RENEW parameter should apply to them. Done means expired certificates are removed, the cleaned files can be committed to relint-envs, and the next update-infrastructure job recreates them.