PKI revamp EST improvements and fixes

backend/src/db/migrations/20251007133321_pki-v3-tables.ts

@@ -34,7 +34,7 @@ export async function up(knex: Knex): Promise<void> {
 
       t.boolean("disableBootstrapCaValidation").defaultTo(false);
       t.text("hashedPassphrase").notNullable();
-      t.binary("encryptedCaChain").notNullable();
+      t.binary("encryptedCaChain");
 
       t.timestamps(true, true, true);
     });

backend/src/db/schemas/pki-est-enrollment-configs.ts

@@ -13,7 +13,7 @@ export const PkiEstEnrollmentConfigsSchema = z.object({
   id: z.string().uuid(),
   disableBootstrapCaValidation: z.boolean().default(false).nullable().optional(),
   hashedPassphrase: z.string(),
-  encryptedCaChain: zodBuffer,
+  encryptedCaChain: zodBuffer.nullable().optional(),
   createdAt: z.date(),
   updatedAt: z.date()
 });