Certificate lifecycle management baseline (Core 0.18.x)

Released Core baseline: certificate inventory and fingerprint lifecycle, agent renewal, Windows/IIS deployment, AD CS enrollment, and customer Vault publication with Linux consumer rollouts.

Release evidence: https://github.com/tokentimerch/tokentimer-core/releases/tag/v0.18.0

Latest baseline corrections: https://github.com/tokentimerch/tokentimer-core/releases/tag/v0.18.2

AD CS delivery: https://github.com/tokentimerch/tokentimer-core/issues/321

Private keys remain on customer-controlled hosts or in an explicitly configured customer Vault; TokenTimer stores public material and references. Follow the release notes and supported qualification scope.

Remaining capabilities are tracked separately: https://tokentimer.featurebase.app/en/p/certops-features

This card establishes Core availability. Check Cloud and Enterprise release documentation for their adopted versions and supported scope.