software/restic: handle certificate renewal

restart restic after renewing certificate, using the same approach as
software/dufs
2 jobs for fix/renew-cert
in 0 seconds, using 0 compute credits, and was queued for 2 seconds