PDF replacement

The working implementation plan is tracked in plans/pdf-cert-generation-replacement.md. Lazyweb references for the admin mocks are saved in .lazyweb/quick-references.