Fleet maintenance

Issue, rotate, and revoke edge enrollment credentials (active · expired · revoked, ADR-0117). Auth/registry actions only — never edge control.