Make client/server encryption optional, rename tests to full names

Make encryption optional for both ServerRegister's LDS client
connection and the server side of ServerLDS/ServerRegister: when
certificate, privateKey, and trustStore are omitted the programs
run with SecurityPolicy#None only.  Secure servers also add a
discovery-only None endpoint so unencrypted clients can still call
FindServers and GetEndpoints.

Consolidate tests from 5 policy-specific cases (nosec_anon,
none_user, basic256sha256_anon, aes256_anon, aes128_user) down to
3 that cover the important axes: unsecure_anonymous,
secure_anonymous, secure_user.  Rename directories to use full
names.  Auto-generate certificates and trust stores in run_test.sh.

Update readme and CLAUDE.md to reflect the current program
interface (unified Client binary, split ServerRegister configs)
and the new test names.

1 files changed, 14 insertions, 0 deletions

diff --git a/tests/secure_user/server_register.conf b/tests/secure_user/server_register.conf
new file mode 100644
index 0000000..65e69d8
--- /dev/null
+++ b/tests/secure_user/server_register.conf
@@ -0,0 +1,14 @@
+# ServerRegister server config — test: secure_user
+
+port = 14841
+applicationUri = urn:localhost:bobink:ServerRegister
+
+certificate = certs/ServerRegister_cert.der
+privateKey = certs/ServerRegister_key.der
+trustStore = certs/trust/server_register
+
+authMode = user
+username = user
+password = password
+
+registerInterval = 10