cert-manager -> 1.17 (k8s 1.36 catch-up, hop 1/5)

Co-Authored-By: Claude Opus 4.8 <[email protected]>

platform/cert-manager/helmrelease.yaml

@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: ">=1.16.0 <1.17.0"   # TODO(WS-SEC): pin at bring-up; Renovate maintains
+      version: ">=1.17.0 <1.18.0"   # TODO(WS-SEC): pin at bring-up; Renovate maintains
       sourceRef:
         kind: HelmRepository
         name: jetstack