Put the original domain first

See merge request !95

The original domain got some state created for it by certbot.  The
certificates are anchored to `payments.privatestorage.io` in the filesystem.
The code handling these domains uses the first domain name in the list to find
the certificates, so make it match the filesystem state.

Multiple domains in issuer certificate

See merge request !94

Add symlink to secrets

Closes #65

See merge request !93

The default case was actually catastrophically bad for any actual deployment
since it would just lock everyone out of all the systems.

More flexibility and less dots in config files.
Implements #65.

Add new private.storage domain to allowed charge origins

See merge request !90

We might want to merge this before turning on live payment.

Related to privatestorageops#333.

Get the local dev env running: Add keys

See merge request !83

Secure key storage

Closes privatestorageops#193

See merge request !86

Add local development network morph/nix configuration

See merge request !82

Fix (make-)issuer.nix file name inconsistency

See merge request !84

Discern make-issuer.nix from issuer.nix better.

Update branch by merging @jcalderone's feedback on local-dev-env-2.