[static-site] Bugs with origin path and smarter cert validation

[Script47]

• Various instance key issues as a result of feat(static-site): allow optional S3 bucket prefix for static site origin #28
• Only perform cert validation if domains in question match the route53 domain