Function run_enrollment 

pub async fn run_enrollment(
    config: EnrollConfig,
) -> Result<NdnIdentity, IdentityError>

Run the full NDNCERT enrollment exchange.

This uses an in-process loopback for now (real network fetch is wired in NdncertCa::serve). For external CA enrollment, use a connected Consumer.