feat(iam2): add GetCert to the feature.Store seam (SAML metadata signing / LDAP)

feature/feature.go

@@ -27,6 +27,8 @@ type Store interface {
 	DeleteUser(ctx context.Context, owner, name string) (bool, error)
 	GetApplication(ctx context.Context, id string) (*model.Application, error)
 	GetOrganization(ctx context.Context, name string) (*model.Organization, error)
+	// GetCert resolves a signing cert by (owner, name) — SAML metadata signing, etc.
+	GetCert(ctx context.Context, owner, name string) (*model.Cert, error)
 }
 
 // Feature is one pluggable enterprise capability. Mount registers its routes on

internal/featurestore/featurestore.go

@@ -86,3 +86,7 @@ func (s *ormStore) GetApplication(ctx context.Context, id string) (*model.Applic
 func (s *ormStore) GetOrganization(ctx context.Context, name string) (*model.Organization, error) {
 	return store.GetOrganizationByName(ctx, s.db, name)
 }
+
+func (s *ormStore) GetCert(ctx context.Context, owner, name string) (*model.Cert, error) {
+	return store.GetCert(ctx, s.db, owner, name)
+}

pkg/model/model.go

@@ -11,4 +11,5 @@ type (
 	User         = schema.User
 	Application  = schema.Application
 	Organization = schema.Organization
+	Cert         = schema.Cert
 )