m/n/c/consensus: close CRL watcher

Change-Id: I3f5702822f69a05a30bdcd8e5502dfa03ed22cbb
Reviewed-on: https://review.monogon.dev/c/monogon/+/782
Tested-by: Jenkins CI
Reviewed-by: Mateusz Zalega <mateusz@monogon.tech>
diff --git a/metropolis/node/core/consensus/status.go b/metropolis/node/core/consensus/status.go
index a19fa14..992d0ac 100644
--- a/metropolis/node/core/consensus/status.go
+++ b/metropolis/node/core/consensus/status.go
@@ -188,6 +188,7 @@
 	}
 
 	crlW := s.ca.WatchCRL(clPKI)
+	defer crlW.Close()
 	crl, err := crlW.Get(ctx)
 	if err != nil {
 		return nil, fmt.Errorf("could not retrieve initial CRL: %w", err)