pub fn bootstrap(
store: &LocalFsStore,
flags: &OpFlags,
payload: Option<TrustRootBootstrapPayload>,
) -> Result<OpOutcome, OpError>Expand description
op env trust-root bootstrap — load (or generate) the operator key and
add its (key_id, public_pem) to the env trust root. This is the
only seeded code path: the revenue-policy writer NEVER mutates the
trust root, so revocation via remove is a durable boundary. Run
once per env; subsequent runs with the same operator key are a no-op.