new directive CTStaticSCTs: obvious way to configure static SCTs for a certificate

note that some refactoring of the code that collates the SCTs for a
certificate is still needed