🚧 Add CA and server cert management

frontend/src/App.tsx

@@ -5,6 +5,7 @@ import { ClientsPage } from "./pages/Clients";
 import { RolesPage } from "./pages/Roles";
 import { GroupsPage } from "./pages/Groups";
 import { BrokerConfigPage } from "./pages/BrokerConfig";
+import { CertificatesPage } from "./pages/Certificates";
 
 // Navigation structure per spec section 57. Entries with a `to` route are
 // implemented; entries without one are planned pages, rendered greyed out
@@ -36,11 +37,11 @@ const NAV_SECTIONS: {
   {
     title: "Certificates",
     items: [
-      { label: "Authorities", hint: "PKI (Release 2)" },
-      { label: "Server Certificates", hint: "PKI (Release 2)" },
-      { label: "Client Certificates", hint: "PKI (Release 2)" },
-      { label: "CSRs", hint: "CSR signing (Release 2)" },
-      { label: "Revocations", hint: "CRL management (Release 2)" },
+      { label: "Authorities", to: "/certificates" },
+      { label: "Server Certificates", to: "/certificates" },
+      { label: "Client Certificates", hint: "Client certs + one-time download (Release 2, later)" },
+      { label: "CSRs", hint: "CSR signing (Release 2, later)" },
+      { label: "Revocations", hint: "CRL management (Release 2, later)" },
     ],
   },
   {
@@ -149,6 +150,14 @@ export function App() {
           </Protected>
         }
       />
+      <Route
+        path="/certificates"
+        element={
+          <Protected>
+            <CertificatesPage />
+          </Protected>
+        }
+      />
       <Route path="/" element={<Navigate to="/clients" replace />} />
     </Routes>
   );