fix: resolve CI failures for PR #135

rcgen 0.14 renamed CertifiedKey::key_pair to CertifiedKey::signing_key.
Update both usage sites in syndesis and harmonia-host.

Gate-Passed: kanon v0.1.0 (menos, 2026-03-30T12:22:40-05:00)
Gate-Checks: clippy,fmt,test

Author: Cody Kickertz

crates/harmonia-host/src/render/tls.rs

@@ -28,7 +28,7 @@ pub fn load_or_generate_server_config(cert_dir: &Path) -> Result<quinn::ServerCo
                 }
             })?;
         let cert_der = certified.cert.der().clone();
-        let key_der = PrivatePkcs8KeyDer::from(certified.key_pair.serialize_der());
+        let key_der = PrivatePkcs8KeyDer::from(certified.signing_key.serialize_der());
         std::fs::write(&cert_path, cert_der.as_ref()).context(IoSnafu)?;
         std::fs::write(&key_path, key_der.secret_pkcs8_der()).context(IoSnafu)?;
         tracing::info!(cert_dir = %cert_dir.display(), "generated self-signed TLS certificate");

crates/syndesis/src/tls/mod.rs

@@ -33,11 +33,11 @@ pub fn compute_fingerprint(cert_der: &[u8]) -> String {
 
 /// Generate a simple self-signed certificate returning `SelfSignedCert`.
 pub fn generate_self_signed_simple(san: Vec<String>) -> Result<SelfSignedCert, SyndesisError> {
-    let CertifiedKey { cert, key_pair } =
+    let CertifiedKey { cert, signing_key } =
         rcgen::generate_simple_self_signed(san).context(CertGenSnafu)?;
 
     let cert_der = cert.der().to_vec();
-    let key_der = key_pair.serialize_der();
+    let key_der = signing_key.serialize_der();
     let fingerprint = compute_fingerprint(&cert_der);
 
     Ok(SelfSignedCert {