Add additional observability around CA operations

This needs further research.

We should look at the list of operations defined here https://github.com/hashicorp/consul/tree/pairing/contrib-ca-docs/contributing/service-mesh/ca#operations and think through what we can do to improve observability so that operators can debug connect certificate lifecycle events more effectively (renewals/expirations etc)