CI: check that POET certificates keep working
Recent changes accidentally broke POET's certificates. While in this case the certificates were both relying on a pointless lemma and arguably too brittle, it highlights that POET will bitrot if we don't take care. This MR adds a CI test that will run POET in non-WIP branches, which should make any certificate-breaking changes obvious.