Provide documentation on mTLS cert rotation

[ihcsim]

Following discussion at https://github.com/linkerd/linkerd2/issues/3228, we need to provide some documentation on how to perform mTLS cert rotation. The issuer cert has a default expiry date of one year from the day of cert generation.