certbot: add possibility to specify commands to run on new certs

This makes it possible to e.g. reload nginx when new certificates are
present.

playbooks/roles/certbot/tasks/main.yaml

@@ -2,6 +2,10 @@
   ansible.builtin.import_tasks:
     file: main/install.yaml
 
+- name: ensure new cert commands
+  ansible.builtin.import_tasks:
+    file: main/new_cert_commands.yaml
+
 - name: ensure certificates
   ansible.builtin.import_tasks:
     file: main/certs.yaml