Runbook: NGINX TLS Termination
Focus: Webserver-TLS-Termination und Policy

1. Run ./run.sh.
2. Inspect work/evidence/certificate.txt, verify.txt and dates.txt.
3. Review SAN, Key Usage, Extended Key Usage, validity and policy.
4. Remove work/ after collecting evidence.
