Seven TDD tasks: resolve_cert_days() and the CERT_DAYS setting, the
--days plumbing into build-client-full, the CLI flag, an optional
charset on InputField, the Days field in the cert form, the TUI wiring,
and docs.
Flags two deliberate deviations from the spec (module global instead of
a threaded parameter, short validation message instead of the resolver's
full sentence) and the two existing dialog tests whose keypress counts
assume a three-field form.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
CERT_DAYS setting, --days CLI flag, and a Days field in the TUI cert
form. "default"/"" inherit EasyRSA's own EASYRSA_CERT_EXPIRE so that
deploying this cannot silently shorten certs on an existing PKI.
Records why --days=N beats exporting EASYRSA_CERT_EXPIRE, and why the
local rejection of 0 is a fast-fail mirror of EasyRSA's own gate rather
than a substitute for it.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
