Remove the per-build WinRM certificate from all hosts

The complement to :zuul:role:`add-build-winrm-cert`.  It removes the
build's WinRM certificate from WSMan registry of all Windows hosts.