CNG: replace alpine-certificates behaviors with gitlab-base

Summary

Related: gitlab-org/build/CNG!1086 (merged)

We snagged on Alpine updating the internal certificates package version, and removing an older one we pinned to. Let's stop doing that. Instead, let us build the patterns on top of gitlab-base. All operational service containers will share this layer set, so it will actually end up in an efficiency boost to Pod instantiation / startup time.

Related issues

#1222 (closed)

Actionable

• 🚧 Build certficates container, with the scripting patterns from alpine-certificate, but based upon gitlab-base
  • ⚠ This image will be tagged based on the CNG's tag directly (15.5.0, 6-4-stable, ...). This provides release consistency lacking in the current implementation.
  • ❔ Mirror certificates tag to alpine-certificates
• 📢 Announce replacement (release post item) as consumers who mirror need to update behaviors
• ⚠ Ensure DSOP is updated to include / replace
• 🛠 Replace the alpine-certificates container in charts with this by default
• 🔊 Announce deprecation (release post itemdeprecation) as consumers who mirror need to update behaviors
• ⛔ Remove alpine-certificates