Function setup_ci 

pub fn setup_ci(
    config: CiSetupConfig,
    ctx: &AuthsContext,
) -> Result<CiSetupResult, SetupError>

Provisions an ephemeral CI identity for use in automated pipelines.

Unlike setup_developer, this function takes the keychain from CiSetupConfig so callers can inject a memory keychain without mutating environment variables.

Args:

• config: CI setup parameters including keychain, passphrase, and CI environment.
• ctx: Injected infrastructure adapters (registry, identity storage, attestation sink, clock).

Usage:

let result = setup_ci(config, &ctx)?;