Set of certificates for 2024; new: systemd-boot

Newly issued certificates for 2024. Includes new cert for systemd-boot.

This is untested, but I linearly continued the sequence of slots on the Yubikey - and preserved the order when reissuing. I hope that the infrastructure is also hardened enough to barf if it signs with a private key that does not match the public key.