✨ Keycloak: Configuration to support multiple certificates in Election Event - Follow Up

[BelSequent]

Parent issue: https://github.com/sequentech/meta/issues/11926

[Copilot]

Pull request overview

Follow-up changes to the certificate authority import/parsing flow to better support multi-certificate bundles by adding validation around certificate expiration and strengthening date parsing tests.

Changes:

• Add unit tests validating notAfter dates parse to timestamps in the past/future.
• Skip importing certificates that are already expired (based on not_after vs current time) and report them back to the caller.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
packages/windmill/src/services/certificate_authority.rs	Extends test coverage for OpenSSL date parsing with explicit past/future notAfter assertions.
packages/harvest/src/routes/import_certificate_authority.rs	Adds an expiration check during CA bundle import to skip expired certs and record an error message.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.