Add guarded IP certificate flow and renewal history

backend/internal/nginxgateway/renewal_hook.go

@@ -0,0 +1,8 @@
+package nginxgateway
+
+import _ "embed"
+
+//go:embed renewal-hook.sh
+var renewalHookScript string
+
+func renewalHook() string { return renewalHookScript }