keycloak-cert: indicate explicit cert duration

Avoid to get the default duration from cert-manager. We want 90days, so we indicate it.