deprecate ssl:add

people run it instead of certs:add and get confused.

ssl:hostname and friends can't be provisioned anymore and people who need to update their certs should migrate to endpoint while at it.

when releasing this, a changelog entry is likely required.