Maybe something like this (executable script in /root/codeit-apachectl.sh):
#!/usr/bin/env bash
if [[ "$1" =~ ^(configtest|graceful|restart)$ ]]; then
/usr/sbin/apachectl "$@"
else
/usr/sbin/httpd "$@"
fi
and then:
certbot renew --apache-ctl=/root/codeit-apachectl.sh --dry-run