Function ensure_dev_ca 

pub fn ensure_dev_ca(
    profile_name: &str,
    caproni_cfg: &CaproniConfig,
) -> Result<()>

Port of up.ensureDevCA: generates (or loads) caproni’s per-profile dev CA so it exists on disk before the deployer orchestrator runs.