Apt repository and SCT support

We currently have a patch ready to merge that will allow us to submit every issued certificate to a set of CT logs and store the corresponding SCTs.

Due to our current issuance process the only plausible way to we could serve SCTs would be via OCSP responses but unfortunately a lack of Golang support for X509v3 extensions in the OCSP library is blocking any further progress on this front.