Switch default restart to Sonic MF Management API via Domain Manager.

Use ConnectionUrl and SMC credentials with IAgentProxy.restart; keep WinRM only as optional fallback.

Co-authored-by: Cursor <cursoragent@cursor.com>

ZA.CoreService.ESBCertificateManager/appsettings.json

@@ -10,18 +10,21 @@
       "Name": "DE-Test",
       "DomainName": "proalpha-test",
       "ConnectionUrl": "tcp://dekun-painwbdet:13070",
-      // Sonic SMC / Domain Manager (NICHT für WinRM):
+      // Sonic SMC / Domain Manager (für MfApi-Neustart):
       "Username": "Administrator",
       "Password": "Administrator",
-      // Windows für WinRM: leer = aktueller Benutzer (z.B. gisler). Nie Sonic-SMC-Logins hier eintragen.
-      // Lokal auf dem Sonic-Server testen: ManagementMode auf "LocalCmd" setzen (kein WinRM nötig).
-      "WinRmUsername": "",
-      "WinRmPassword": "",
-      "ManagementMode": "WinRm",
+      // Standard: Sonic MF Management API (IAgentProxy.restart) – kein WinRM.
+      // Benötigt Java/JDK + Client-JARs unter SonicHome\\lib (oder MfClientLibPath).
+      // Optional-Fallback: "WinRm" / "LocalCmd" (stopcontainer/startcontainer).
+      "ManagementMode": "MfApi",
       "SonicHome": "C:\\Sonic\\MQ10.0",
+      "MfClientLibPath": "",
       "KnownContainers": [
         "DE-Test"
       ],
+      // Nur für ManagementMode=WinRm relevant; leer lassen wenn nicht genutzt:
+      "WinRmUsername": "",
+      "WinRmPassword": "",
       "WinRmPort": 5985,
       "TimeoutSeconds": 120,
       "PostRestartDelaySeconds": 20,