Merge "fix(cert-create): add guardrails around brainpool usage" into integration