Harden cert provisioning failure and write-back

Rate limits no longer inflate ssl_retry_count into an instant FAILED
path. Centralize outcomes in decideProvisioningOutcome, keep ACME
order state on transient and rate-limit errors, bound each Process
tick with a timeout, and block on FOR UPDATE when persisting a
freshly issued certificate.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>
Signed-off-by: Bryan Frimin <bryan@probo.com>

pkg/probod/probod.go

@@ -524,6 +524,7 @@ func (impl *Implm) Run(
 		accountKey,
 		rootCAs,
 		l,
+		r,
 	)
 	if err != nil {
 		return fmt.Errorf("cannot initialize ACME service: %w", err)