Runbook: PFS and Key Exchange Review
Focus: Forward Secrecy und Key Exchange

1. Run ./run.sh.
2. Inspect work/evidence/certificate.txt, verify.txt and dates.txt.
3. Review SAN, Key Usage, Extended Key Usage, validity and policy.
4. Remove work/ after collecting evidence.
