evaluate replacing various online HSM ceremonies from tools/ with boulder's ceremony command

[g-k]

That is https://github.com/letsencrypt/boulder/tree/main/cmd/ceremony

┆Issue is synchronized with this Jira Task

[g-k]

or something like https://github.com/cloudflare/cfssl