[epic] Support registry+v1 bundles that include CSVs with `spec.webhookdefinitions`

[joelanford]

See #749

The registry+v1 bundle format allows bundles to specify web hook definitions. OLMv0 implemented this via its own custom self-signed certificate and custom signing/renewal logic, which has had bugs mainly related to unintended expirations.

In OLMv1, we intend to support these bundles, but the desire is for OLMv1 to delegate to another system for certificate handling. We know of two popular systems for certificate management, and we intend to build support for these as a start:

• CNCF's cert-manager
• OpenShift's service-ca-operator

[joelanford]

I implemented a proof of concept as part of #1506 and #1418. We should revisit those PRs when we have time to pick this issue up.

[github-actions]

Issues go stale after 90 days of inactivity. If there is no further activity, the issue will be closed in another 30 days.