Enable PDFKit for certificate generation

@sefk or @jbau please.

* Both PDFKit and XHTML2PDF will work, but PDFKit is preferred. It can
  make prettier output.
* Documented new dependencies in readme, requirements

I tried a couple wrappers before PDFKit; most of them were awful. PDFKit is mostly pretty nice, and more or less drops right in.