Extend security-officer keys for another couple years.

Certify key until 2030 (planning to move to a PQC algo then).
Encrypt and Sign keys until 2028.

Approved by: so