feat(site-runtime): CertStoreActor exports trusted certs (thumbprint+DER) for node reconciliation (UA1 groundwork)

src/ZB.MOM.WW.ScadaBridge.Commons/Messages/Management/CertTrustCommands.cs

@@ -82,6 +82,30 @@ public record RemoveCertFromLocalStore(string Thumbprint);
 /// <summary>Per-node: enumerate the local trusted-peer and rejected stores.</summary>
 public record ListLocalCerts();
 
+/// <summary>
+/// Per-node: export the trusted-peer store contents (thumbprint + raw DER bytes)
+/// so the Deployment Manager singleton can reconcile the trusted set onto a
+/// (re)joining site node. Trusted store only — rejected certs are never pushed.
+/// </summary>
+public record ExportLocalTrustedCerts();
+
+/// <summary>
+/// One exported trusted certificate: its thumbprint (store filename key) and the
+/// raw DER bytes needed to re-write it into another node's trusted-peer store.
+/// </summary>
+/// <param name="Thumbprint">The certificate thumbprint.</param>
+/// <param name="DerBytes">The certificate's raw DER encoding.</param>
+public record ExportedCert(string Thumbprint, byte[] DerBytes);
+
+/// <summary>
+/// Per-node reply to <see cref="ExportLocalTrustedCerts"/>: the local trusted-peer
+/// store's certificates, or a failure with the IO error.
+/// </summary>
+/// <param name="Success">True if the trusted store was enumerated successfully.</param>
+/// <param name="Error">The error message on failure, otherwise null.</param>
+/// <param name="Certs">Exported trusted certificates, empty on failure.</param>
+public record LocalCertExport(bool Success, string? Error, IReadOnlyList<ExportedCert> Certs);
+
 /// <summary>
 /// Per-node ack for a <see cref="WriteCertToLocalStore"/>, <see cref="RemoveCertFromLocalStore"/>
 /// or <see cref="ListLocalCerts"/> operation.