[Story] Redeploy workloads using agent auto-config when certs are renewed

[ebaron]

We should also probably implement something similar for agent auto-configuration. This will be trickier though as it can only be done at the pod template level and we currently only operate on pods. This would depend on #1088.

Originally posted by @ebaron in #1112 (comment)

[ebaron]

If the operator could ensure that the renewed certificates are updated in the workloads' volume mounts, we could consider adding logic to the agent to reload certificate files if it detects that they're expired. This would avoid the need to restart the workloads.

[andrewazores]

we could consider adding logic to the agent to reload certificate files if it detects that they're expired

It might be even simpler - the Agent could just watch for file changes and reload them any time they do change. If that's because the Operator has renewed and replaced them, it'll be the same thing.