I posted this question on Microsoft Learn too and it was answered.: https://learn.microsoft.com/en-us/answers/questions/5543600/retrieve-a-certificate-by-id-in-apim-policy
The Certificate can only be obtained using the thumbprint, so automating the KV secret when rotating the certificate is the only answer at the moment.