fix(CON-1290): ic-replay: do not try to verify the certification shares for heights below the CU

[Sawchord]

This PR changes redeliver_certifications in ic-replay, such that it does not attempt to deliver certifications which are below the latest CUP height. Certifications below the latest CUP height need key material from that CUP which is already deleted once we have a more recent CUP and therefore the verification fails.