Runbook: Trust Store Management
Focus: OS-, Browser-, JVM- und Container-Trust Stores

1. Run ./run.sh.
2. Inspect work/evidence/certificate.txt, verify.txt and dates.txt.
3. Review SAN, Key Usage, Extended Key Usage, validity and policy.
4. Remove work/ after collecting evidence.
