feat: improve ADCS and share enumeration logic and enhance certipy parser deduplication

[l50]

Key Changes:

• Improved ADCS work collection to include LDAP-open DCs without CertEnroll shares, increasing coverage for certipy_find enumeration
• Enhanced per-host credential selection in SMB share enumeration to prefer domain-matching credentials, unblocking cross-forest CA discovery
• Updated certipy parser to generate unique vuln_ids per vulnerable template, preventing deduplication of distinct templates on the same CA
• Added comprehensive unit tests for new logic in ADCS work collection, share enumeration, and certipy parser

Added:

• LDAP service detection logic in ADCS automation to recognize DCs as valid certipy_find targets even without discovered CertEnroll shares
• Unit tests covering LDAP fallback in ADCS work collection, per-host credential selection in share enumeration, and template slugification in the certipy parser
• slugify_template function in the certipy parser to normalize template names for vuln_id generation

Changed:

• ADCS work collection logic now sources candidate hosts from both confirmed CertEnroll shares and LDAP-open DCs, avoiding silent omission of cross-forest CAs when SMB share enumeration fails
• Share enumeration logic now pairs each host with a credential matching its AD domain when available, falling back to a global credential only when needed
• Certipy parser now includes the normalized template name in the vuln_id for each finding, ensuring multiple vulnerable templates of the same ESC type on a single CA are tracked separately

Removed:

• Previous deduplication approach in certipy parser that could collapse distinct vulnerable templates of the same ESC type on the same CA into a single entry

[codecov]

Codecov Report

❌ Patch coverage is 80.22599% with 35 lines in your changes missing coverage. Please review.
✅ Project coverage is 76.09%. Comparing base (647dfe9) to head (1be20b5).

Files with missing lines	Patch %	Lines
ares-cli/src/orchestrator/automation/share_enum.rs	42.10%	33 Missing ⚠️
ares-cli/src/orchestrator/automation/adcs.rs	98.76%	1 Missing ⚠️
ares-tools/src/parsers/certipy.rs	97.43%	1 Missing ⚠️

Additional details and impacted files

@@                   Coverage Diff                    @@
##           feat/more-attack-cov     #278      +/-   ##
========================================================
+ Coverage                 76.07%   76.09%   +0.02%     
========================================================
  Files                       432      432              
  Lines                    111949   112106     +157     
========================================================
+ Hits                      85169    85311     +142     
- Misses                    26780    26795      +15     

Files with missing lines	Coverage Δ
ares-cli/src/orchestrator/automation/adcs.rs	72.42% <98.76%> (+3.55%)	⬆️
ares-tools/src/parsers/certipy.rs	89.03% <97.43%> (+0.94%)	⬆️
ares-cli/src/orchestrator/automation/share_enum.rs	21.42% <42.10%> (+21.42%)	⬆️

... and 2 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.