ecea0c668a
Follow-up to #239. cert-manager already exposes metrics services (webhook :9402 metrics, cainjector :9402 http-metrics) but nothing scraped them. Add a VMServiceScrape so the observability VMAgent collects cert-manager metrics (cert issuance, controller sync, etc.).