ACME changes

[blind-oracle]

• API-breaking: change TokenManager & DnsManager traits to require specifying which token to unset/delete, instead of removing everything
• Fix all trait implementations to account for the above
• Fix ACME client to collect (zone, token) tuples to clean them up after certificate issuance or an error
• Add IcDnsLb implementation of DnsManager trait that uses ic-dns-lb as a DNS backend to set ACME challenges
• Add integration test to Cloudflare/ic-dns-lb backends
• Updates pebble & pebble-challtestsrv ACME integration test binaries to the latest version

[Copilot]

Pull request overview

Updates ACME DNS challenge handling to remove specific tokens and adds IC DNS LB support.

Changes:

• Tracks and cleans up exact (zone, token) pairs.
• Adds Cloudflare and IC DNS LB backend tests.
• Updates Pebble test binaries and TLS test dependencies.

Reviewed changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
ic-bn-lib/tools/cloudflare-test.rs	Uses targeted record deletion.
ic-bn-lib/src/tls/acme/mod.rs	Updates token APIs and backend types.
ic-bn-lib/src/tls/acme/dns/mod.rs	Updates DNS deletion and test helpers.
ic-bn-lib/src/tls/acme/dns/ic_dns_lb.rs	Adds the IC DNS LB backend.
ic-bn-lib/src/tls/acme/dns/cloudflare.rs	Implements content-specific deletion and tests.
ic-bn-lib/src/tls/acme/client.rs	Tracks tokens and performs best-effort cleanup.
ic-bn-lib/src/tests/pebble.rs	Updates Pebble binaries and arguments.
ic-bn-lib/Cargo.toml	Enables Rustls for test servers.
Cargo.lock	Records TLS feature dependencies.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.