RotateMoqListenerCerts

Rotate TLS certificates on a running MoQT listener. The old listener is stopped and a new one started with the new certs on the same port. Existing QUIC/WebTransport connections are NOT affected — they have their own session keys. Namespace routing state is preserved.