pagure: fix ssl cert deployment
    
    The current playbook assumes the old digicert ssl cert thats in private.
    However, we got that in 2020 and it's expired. We switched pagure.io
    over to letsencrypt a while back. Somehow we didn't change the playbook
    however, or the change was lost somewhere. :(
    
    So, this adds 2 calls to the letsencrypt role to get certs for the prod
    and staging pagure instances. I think this should do the right thing
    with placement of files, but more eyes welcome.
    
    Without this playbooks runs have the chance of messing up pagure.io
    certs, so I think we should fix this asap.
    
    Signed-off-by: Kevin Fenzi <kevin@scrye.com>