Task description

in this release we:

• fixed an unintended change introduced 4.0.0 where renew_before_expiry could not be shorter than certbot's default renewal time
• introduced ARI support which completely overrides both renew_before_expiry or certbot defaults if ACME renewal info is available for a certificate

there's a couple different PRs working on these things in parallel. before the 4.1.0 release, i personally think it's worth looking over the changelog and ensuring it says what we want about these changes