V1 [TEST] TLS integration test

[austin-barrington]

Context

TLS support is implemented (server.tls_enabled, server.tls_cert_path, server.tls_key_path) using rustls. There is no integration test that verifies TLS connections actually work.

Deliverables

Add an integration test (tests/integration/tls_test.rs) that:

1. Starts the server with a self-signed TLS certificate (generated at test time)
2. Connects via reqwest with custom TLS config (accepting the self-signed cert)
3. Writes and queries data over HTTPS
4. Verifies that plain HTTP connections are rejected when TLS is enabled
5. Verifies that invalid certificates are rejected

Use a test certificate generated at runtime (e.g., via rcgen crate) to avoid committing TLS keys to the repo.

References

• src/adapters/http/tls.rs — TLS setup with rustls
• config.toml.example — TLS config keys
• docs/user-guide/configuration.md — TLS documentation

Priority

P2 — Test coverage, security hardening