The [webapp|deposit].internal.staging.s.n servers are no longer running
hitch/varnish and should not be used as monitoring entrypoints.
This commit removes them from the certificate aliases and declares a
new alias for the reverse-proxy.
Related to T2747