Rotate TLS certificates on a running MoQT listener. The old
listener is stopped and a new one started with the new certs
on the same port. Existing QUIC/WebTransport connections are NOT
affected — they have their own session keys. Namespace routing
state is preserved. |