build(deps): update tss-esapi and revert policysigned workaround

[hyperfinitism]

Changes

• Update tss-esapi from 8.0.0-alpha.2 to commit: 2c36f10. This commit fixes the policy_signed() API.
• Revert the changes (workaround) to policysigned.rs in fix: correct policy test flows and policysigned auth session handling #27.
• Add parse_duration() in parse.rs and use it for expiration CLI argument in policysigned.rs

[gemini-code-assist]

Code Review

This pull request refactors the policysigned command to use high-level tss-esapi abstractions instead of raw FFI, improving safety and removing manual memory management. Feedback highlights opportunities to handle negative expiration values, optimize Nonce allocations, and replace unsafe ticket serialization with the Marshall trait.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 2f45b9c5a7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[Copilot]

Pull request overview

This PR updates the tss-esapi dependency to a specific upstream git revision that fixes the policy_signed() wrapper API, and then removes the previously-added raw-ESYS FFI workaround in the policysigned subcommand to return to the safe wrapper.

Changes:

• Pin tss-esapi / tss-esapi-sys to upstream git rev 2c36f103… to pick up the policy_signed() fix.
• Revert src/cmd/policysigned.rs back to using tss_esapi::Context::policy_signed() and policy_get_digest(), removing raw FFI calls and manual ESYS allocation/free logic.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
src/cmd/policysigned.rs	Replaces raw ESYS calls with the fixed tss-esapi wrapper and aligns the command flow with other policy subcommands.
Cargo.toml	Switches tss-esapi from crates.io to a pinned git revision containing the upstream fix.
Cargo.lock	Updates lock entries to reflect the git-sourced tss-esapi and tss-esapi-sys.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.