[eichou]

Summary

Adds SLES support for Let's Encrypt certificate management with:

• Native Certbot execution through zypper-managed packages
• Optional Podman-based Certbot execution
• SUSEConnect and repository support
• Azure DNS-01 and HTTP-01 certificate workflows
• SUSE-specific profiles, data mappings, and tests

Validation

• Focused RSpec: 36 examples, 0 failures
• Puppet parser validation passed
• YAML and metadata validation passed
• git diff --check passed
• Native and Podman catalogs compiled successfully with --noop on a SLES test node

No ACME issuance, Azure DNS changes, or production deployment were performed.

[kenyon]

This needs to be split into multiple pull requests if you're making unrelated changes to non-SUSE hiera data.

[eichou]

This PR has been narrowed to the SLES implementation. It depends on generic dns-azure support from PR #419. The SUSE checks may not pass until PR #419 is merged.