Regenerate server cert on every startup; drop edge.xx from pre-release filenames

- generate_bundle now always regenerates the server cert while preserving
  the CA cert (and its private key) so the trust store stays valid
- remove clear_server_certs from config migration since it's no longer needed
- drop edge.${run_number} from edge pre-release artifact names (commit id
  already provides uniqueness)

Author: fjh1997

.github/workflows/publish-edge-pre-release.yml

@@ -68,7 +68,7 @@ jobs:
           )
           build_serial="$(( GITHUB_RUN_NUMBER % 10000 ))"
           short_sha="${GITHUB_SHA::12}"
-          edge_version="${base_version}-edge.${GITHUB_RUN_NUMBER}.${short_sha}"
+          edge_version="${base_version}-${short_sha}"
           RELEASE_VERSION="${edge_version}" \
           ANDROID_VERSION_SERIAL="${build_serial}" \
           "$PYTHON_BIN" ./scripts/ci-sync-version.py
@@ -173,7 +173,7 @@ jobs:
           )
           build_serial="$(( GITHUB_RUN_NUMBER % 10000 ))"
           short_sha="${GITHUB_SHA::12}"
-          edge_version="${base_version}-edge.${GITHUB_RUN_NUMBER}.${short_sha}"
+          edge_version="${base_version}-${short_sha}"
           RELEASE_VERSION="${edge_version}" \
           ANDROID_VERSION_SERIAL="${build_serial}" \
           "$PYTHON_BIN" ./scripts/ci-sync-version.py

Cargo.lock

@@ -59,7 +59,7 @@ http-body-util = "0.1"
 hyper = { version = "1", features = ["http1", "server"] }
 hyper-util = { version = "0.1", features = ["server", "server-auto", "http1", "http2", "tokio"] }
 libc = "0.2"
-rcgen = "0.12"
+rcgen = { version = "0.12", features = ["x509-parser"] }
 reqwest = { version = "0.12", default-features = false, features = ["http2", "rustls-tls"] }
 rustls = { version = "0.23", features = ["ring"] }
 rustls-pemfile = "2"