[Deprecation] CA Directory Inside `ssldir` Layout

[silug]

Summary

Ruby master code warns that CA data under <ssldir>/ca is deprecated and migration to /etc/puppetlabs/puppetserver/ca is required.

Evidence

• src/ruby/puppetserver-lib/puppet/server/master.rb:223 emits a deprecation warning for the old CA directory location.
• src/ruby/puppetserver-lib/puppet/server/master.rb:230 checks for old #{Puppet[:ssldir]}/ca usage and triggers warning.

Proposed OpenVox Server 9 Change

• Remove compatibility handling for old CA location under ssldir.
• Require migrated CA directory layout.

Compatibility / Risk

• High risk for environments that have not run CA migration.
• Needs clear preflight/migration tooling guidance.

Implementation Notes

• Add startup check with actionable error if old layout is detected.
• Ensure migration tooling/docs are linked from failure message.

Acceptance Criteria

• Old <ssldir>/ca compatibility path is removed.
• Server requires modern CA directory layout.
• Deprecation warning replaced by explicit unsupported-layout behavior.

Suggested Tests

• Startup tests for old vs migrated CA layouts.
• CA operational integration tests in migrated layout.

[silug]

Deprecated in 2d02732.