generate certs using instance id

[bradrydzewski]

this depends on generating a unique server name, per this issue:
#197

we should use the instance id when generating the cert, not the runner name. The server name in the cert needs to be unique and resilient to restarts. Currently the runner name can change if the pod is re-created, which would invalidate all certs.