pub async fn secured() -> TestNodeExpand description
A secured (Authenticated) node — a CA is created so the node self-enrolls a
real leaf. sign produces an ES256-signed envelope; posture() is
Authenticated. The CA is created with auto_unlock: false (no vault write).