feat: add vault service/query altnames

- add nginx aliases for vault services
- add additional vault certificates
- change certmanager script to use vault.service.consul

hieradata/country/au/region/drw1/infra/storage/vault.yaml

@@ -1,2 +1,9 @@
 ---
+# additional altnames
+profiles::pki::vault::alt_names:
+  - vault.service.au-drw1.consul
+
+profiles::nginx::simpleproxy::nginx_aliases:
+  - vault.service.au-drw1.consul
+
 profiles::vault::server::primary_datacenter: 'au-drw1'

hieradata/country/au/region/syd1/infra/storage/vault.yaml

@@ -1,4 +1,13 @@
 ---
+# additional altnames
+profiles::pki::vault::alt_names:
+  - vault.service.au-syd1.consul
+  - vault.query.consul
+
+profiles::nginx::simpleproxy::nginx_aliases:
+  - vault.service.au-syd1.consul
+  - vault.query.consul
+
 profiles::vault::server::primary_datacenter: 'au-syd1'
 consul::services:
   vault: