fix: add retries to certificate provisioning

[achingbrain]

The p2p-forge service at libp2p.direct sometimes rejects requests with 401 errors, the only thing to do is to retry.

This can probably be reverted in future if it becomes clear why some requests are rejected.

Change checklist

• I have performed a self-review of my own code
• I have made corresponding changes to the documentation if necessary (this includes comments as well)
• I have added tests that prove my fix is effective or that my feature works