software/restic: handle certificate renewal

restart restic after renewing certificate, using the same approach as
software/dufs
1 job for 1.0
in 0 seconds, using 0 compute credits, and was queued for 0 seconds