doc/dev/notes: keymgr-certificates: Add note about certificate management.

This describes the storage format and on-disk key store paths of relaysign_ed certificates (which we'll soon need to support).

Part of #1617