Issue TLS certificates for the LLM request router

## Description

Make the LLM request router own the certificate and TLS secret used for reverse QUIC.

## Definition of Done

- Certificate DNS names cover the service address and advertised reverse QUIC hostnames.
- The router mounts the leaf certificate and key and serves the required certificate chain.
- Chart validation rejects advertised hostnames not covered by certificate DNS names.
