Runbook: Legacy Protocol Disablement
Focus: SSL/TLS-Altversionen deaktivieren

1. Run ./run.sh.
2. Inspect work/evidence/certificate.txt, verify.txt and dates.txt.
3. Review SAN, Key Usage, Extended Key Usage, validity and policy.
4. Remove work/ after collecting evidence.
