fix(ssl-key): use -secure- SHA-256 signing

https://shaaaaaaaaaaaaa.com/check/sync.edouard-lopez.com
refactor(security): rename 'ssl-key' to 'ssl-certificate'