feat!: probes generate their own keys and enroll with a join token; node and peer keys are separate [CI]

backend/tests/MoShiro.Backend.Tests/AgentHarness.cs

@@ -63,18 +63,19 @@ public sealed class AgentHarness : IAsyncDisposable
         return harness;
     }
 
-    /// <summary>在后端生成 Probe 身份（私钥只返回一次），并构造连到这个 Agent 的假 Probe。</summary>
+    /// <summary>注册一个 Probe（密钥由它自己生成），并构造连到这个 Agent 的假 Probe：对等面用它的对等面密钥。</summary>
     public async Task<ProbeSimulator> CreateProbeAsync()
     {
-        JsonNode identity = await Backend.CreateProbeAsync();
-        NodeIdentity key = NodeIdentity.FromPkcs8(Convert.FromBase64String(identity["private_key"]!.GetValue<string>()));
+        using EnrolledProbe probe = await Backend.CreateProbeAsync();
+        // 假 Probe 要在注册目录被释放之后继续用这把密钥：导出再导入一份
+        NodeIdentity key = NodeIdentity.FromPkcs8(probe.Identity.PeerIdentity.ExportPkcs8());
         string publicKey = Convert.ToBase64String(key.PublicKeySpki);
 
         // 等 Agent 的期望状态里有了这把公钥（否则握手会被拒绝）
         await BackendFixture.EventuallyAsync(
-            () => Task.FromResult(App.IsPeerKnown(identity["probe_id"]!.GetValue<string>(), publicKey)),
-            because: "the agent should learn the probe's key");
-        return new ProbeSimulator(identity["probe_id"]!.GetValue<string>(), key);
+            () => Task.FromResult(App.IsPeerKnown(probe.ProbeId, publicKey)),
+            because: "the agent should learn the probe's peer key");
+        return new ProbeSimulator(probe.ProbeId, key);
     }
 
     public async Task<ProbeSimulator> ConnectProbeAsync()