cert-manager sequential upgrade -> 1.19 (k8s 1.36 catch-up)

Co-Authored-By: Claude Opus 4.8 <[email protected]>

platform/cert-manager/helmrelease.yaml

@@ -10,7 +10,7 @@ spec:
   chart:
     spec:
       chart: cert-manager
-      version: ">=1.18.0 <1.19.0"   # TODO(WS-SEC): pin at bring-up; Renovate maintains
+      version: ">=1.19.0 <1.20.0"   # TODO(WS-SEC): pin at bring-up; Renovate maintains
       sourceRef:
         kind: HelmRepository
         name: jetstack