bump dependency

add policy callback interface

revert internal signer for now

re add unmanaged for long running use (https server)

breaking change: upgrade to tpm-direct; remove library managed handle

remove gorelaser till later refactoring

update public cert

refactor for better error handling

refactor and remove unnecessary exttlsconfig

add additional tests; prevent silent errors