aibridge: implement proxy certificate caching

[dannykopping]

RFC

Creating certificates is expensive; we must cache certs after issuance.

Acceptance criteria:

• Certificates are cached in-memory
• Has tests