When renewing Transport Layer Security (TLS) certificate, redeploy only when certificate changed

Renewal takes place daily in https://github.com/ise621/machine/blob/34b233b255e8a2a446d589b2eb56451e6c138306/local.yml#L120-L126 and currently we redeploy always by running `make deploy` in cron job after running `make renew-certificates`. I'd like to deploy only when renewal took actually place by using certbot's `--deploy-hook` to run `make deploy`.