Extend browser admin lifecycle actions

Support browser reboot and HTTPS stop through deferred control, plus
exact
`web certificate rotate --force` handoff to the dispatcher. Add typed
request
validation and focused boundary and lifecycle coverage.

tests/admin_console_boundary/run.py

@@ -27,6 +27,14 @@ with tempfile.TemporaryDirectory(prefix="admin-console-boundary-") as directory:
                     "-g", str(path / "test.c"), parser,
                     "-o", str(path / "test")], check=True, timeout=30)
     subprocess.run([str(path / "test")], check=True, timeout=10)
+    unit = ((ROOT / "tests/admin_console_boundary/fakes.h").read_text()
+            + strip_includes(header) + "\n" + strip_includes(source)
+            + (ROOT / "tests/admin_console_boundary/certificate.c").read_text())
+    (path / "certificate.c").write_text(unit)
+    subprocess.run(["cc", "-std=c11", "-Wall", "-Wextra", "-Werror",
+                    "-g", str(path / "certificate.c"), parser,
+                    "-o", str(path / "certificate")], check=True, timeout=30)
+    subprocess.run([str(path / "certificate")], check=True, timeout=10)
     ssh = (ROOT / "src/ssh_transport.c").read_text()
     adapter = ssh[ssh.index("static admin_ssh_console_token_t admin_console_token("):
                   ssh.index("static void *ssh_malloc(")]