pub fn generate_self_signed_cert( common_name: &str, ) -> Result<(String, String), Box<dyn Error + Send + Sync>>
Generates a self-signed TLS certificate for development/testing.
Returns (cert_pem, key_pem) as strings.