Advertise a Bluetooth beacon and hand over the hotspot after an identity-proven exchange (R76 slice 5a)

crates/connetto-client/Cargo.toml

@@ -165,8 +165,10 @@ ring = { version = "0.17", features = ["std"], optional = true }
 # bundle, the same step the server runs. Native only, with the binary.
 connetto-schema = { workspace = true, optional = true }
 # The peer link the device serves and dials (R76). Its discovery feature is
-# on, so a peer build always browses and autolinks what it finds (R76 slice 3).
-connetto-peer = { path = "../connetto-peer", optional = true, features = ["discovery"] }
+# on, so a peer build always browses and autolinks what it finds (R76 slice
+# 3), and its bluetooth feature carries the beacon and the exchange (R76
+# slice 5).
+connetto-peer = { path = "../connetto-peer", optional = true, features = ["discovery", "bluetooth"] }
 # The page codec, one per target, both selected here rather than by a feature
 # because `ReplicaCipher::Encrypted` cannot be honest without it: in a SQLite
 # with no codec, `PRAGMA key` is an unrecognised pragma that succeeds silently
@@ -328,8 +330,9 @@ openidconnect = { version = "4.0.1", default-features = false, features = [
 # PKCE token of their own. Test-only since R47: the client's own PKCE token now
 # comes from the platform RNG through `getrandom`.
 uuid = { version = "1", features = ["v4", "v5"] }
-# A self-signed cert and the server stack for a wss target the builder tests dial.
-rcgen = "0.13"
+# The Bluetooth tests mint a root, an issuer and the device keys it signs,
+# the same keys the peer crate's proofs mint.
+rcgen = { version = "0.14.10", default-features = false, features = ["ring", "x509-parser"] }
 rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
 tokio-rustls = { version = "0.26", default-features = false, features = ["tls12"] }
 tokio = { version = "1", features = ["test-util"] }