Add complete seed, Always Encrypted cert package, and TEST system DE-Test.

Co-authored-by: Cursor <cursoragent@cursor.com>

ZA.CoreService.ESBCertificateManager/Database/AlwaysEncrypted/Install-Certificate.ps1

@@ -0,0 +1,41 @@
+<#
+.SYNOPSIS
+    Importiert das Always-Encrypted-Zertifikat in CurrentUser\My.
+.NOTES
+    PFX-Passwort (nur Dev): ESB-AE-Dev-Only!
+    Thumbprint muss mit appsettings AlwaysEncrypted:CertificateThumbprint uebereinstimmen.
+#>
+$ErrorActionPreference = "Stop"
+
+$scriptDir = Split-Path -Parent $MyInvocation.MyCommand.Path
+$pfxPath = Join-Path $scriptDir "ESB_ZertifikatManager_AE.pfx"
+$thumbPath = Join-Path $scriptDir "thumbprint.txt"
+
+if (-not (Test-Path $pfxPath)) {
+    throw "PFX nicht gefunden: $pfxPath"
+}
+
+$expectedThumb = (Get-Content -Path $thumbPath -Raw).Trim()
+$password = ConvertTo-SecureString -String "ESB-AE-Dev-Only!" -Force -AsPlainText
+
+$imported = Import-PfxCertificate `
+    -FilePath $pfxPath `
+    -CertStoreLocation "Cert:\CurrentUser\My" `
+    -Password $password `
+    -Exportable
+
+Write-Host "Zertifikat importiert:"
+Write-Host "  Subject    : $($imported.Subject)"
+Write-Host "  Thumbprint : $($imported.Thumbprint)"
+Write-Host "  PrivateKey : $($imported.HasPrivateKey)"
+
+if (-not [string]::Equals(
+        $imported.Thumbprint,
+        $expectedThumb,
+        [System.StringComparison]::OrdinalIgnoreCase)) {
+    Write-Warning "Thumbprint weicht von thumbprint.txt ab ($expectedThumb)."
+}
+
+Write-Host ""
+Write-Host "appsettings.json AlwaysEncrypted:CertificateThumbprint ="
+Write-Host $imported.Thumbprint

ZA.CoreService.ESBCertificateManager/Database/AlwaysEncrypted/cek_encrypted_value.txt

@@ -0,0 +1 @@
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

ZA.CoreService.ESBCertificateManager/Database/AlwaysEncrypted/pfx-password.txt

@@ -0,0 +1 @@
+ESB-AE-Dev-Only!

ZA.CoreService.ESBCertificateManager/Database/AlwaysEncrypted/thumbprint.txt

@@ -0,0 +1 @@
+95E906CCC9C5F227969877CF3BD46D2AD7168853