Bumps [golang.org/x/net](https://github.com/golang/net) from 0.11.0 to 0.17.0.
- [Commits](golang/net@v0.11.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Optionally pass the context argument down to the OnDemand decision func

* Remove the "compatibility shims"

This "breaks" the API here, but the change should be trivially obvious to an implementor
and it gives a lot less headache later.

This allows a outside caller of `GetCertificate` to use `errors.As` to check for
their own response, and react accordingly.

Based on recent DNS propagation experiences

Cleaning storage now obtains a lock, and it can optionally be configured
to only happen once per interval.

This should help lower costs for expensive storage backends
that are used by clusters of CertMagic/Caddy instances.

Add a few tests to exercise OCSP stapling, using an httptest.Server
acting as the OCSP responder.

These tests are very simplistic:
 - a "good" OCSP response should be stapled
 - a "revoked" OCSP response should not be stapled
 - the DisableStapling option should be honored
 - OCSP stapling requires an issuing certificate

No attempt is made to provide sensible timestamps, either in the test
certificates or in the OCSP responses.

This brings unit test coverage for ocsp.go from 21% to 70%.