zero-lab: ti-cli 0.3.0, ti-idpd 0.1.0 and new PKI commands

zero-lab

New tags/releases:

• go/epa/v0.23.0
• go/oauth/v0.51.0
• rust/ti-cli/v0.3.0
• rust/ti-idpd/v0.1.0

Branch origin/main: 17 new commits, 262 changed files (8,811 insertions, 39,390 deletions).

Topics:

• Releases: ti-cli 0.3.0 and ti-idpd 0.1.0 (commit "ti-cli: release 0.3.0; ti-idpd: release 0.1.0").
• ti-idpd / ePA (PR #46, feat/epa-rust-ti):
  • IDP service authenticator module flow and new command ti idpd authenticate.
  • ePA: SMC-B identity, IDP service and VAU checks run via the Rust ti.
• ti-cli, PKI (PR #43, #44, #45):
  • ti-pki: GEM.RCA7 as anchor, algorithms::NIST.
  • Option --nist-only for pki verify and pki roots list.
  • New commands pki roots bundle, pki tsl bundle, pki tsl export.
  • pki verify with --ocsp-responder and --ocsp-max-age.
  • New commands identity inspect|sign and pki verify-signature; option --p12-password-path.
  • pki inspect --short.
• Go: oauth2client stub removed, links in the development guide corrected.
• Backlog: TASK-24 (HITL results) and TASK-25 completed; TASK-5 completed; TASK-28 and TASK-29 created for NIST-only trust.

At a glance

• zero-lab: 4 new tags (go/epa/v0.23.0, go/oauth/v0.51.0, rust/ti-cli/v0.3.0, rust/ti-idpd/v0.1.0).
• ti-idpd appears with release 0.1.0 and the command ti idpd authenticate.
• ti-cli 0.3.0 contains new PKI commands (bundle, export, OCSP options, --nist-only) and GEM.RCA7 as an anchor.
• 17 commits on origin/main with 8,811 insertions and 39,390 deletions across 262 files.