Import upstream v0.16.22, stripped

Upstream commit: 474dd0229cb20cf513036619781ed97bd8073c3f
Enterprise-only files removed or emptied: 63
Enterprise-only snippets removed: 117 in 50 files
Dangling module declarations removed: 5
Cargo edits turning enterprise off: 14
Verification: clean
Enterprise feature gates left for rebuilt features: 19 in 18 files

Produced by tools/fork/strip.py. The full report is in docs/fork/strip-reports/ on main.

tests/docker/scripts/gen-certs.sh

@@ -0,0 +1,26 @@
+#!/bin/bash
+set -e
+
+CERT_DIR=/certs
+
+if [ ! -f "$CERT_DIR/cert.pem" ]; then
+  echo "Generating self-signed certificate..."
+  openssl req -x509 -newkey rsa:2048 -nodes \
+    -keyout "$CERT_DIR/key.pem" \
+    -out "$CERT_DIR/cert.pem" \
+    -days 365 \
+    -subj "/CN=localhost/O=Stalwart Test/C=US" \
+    -addext "subjectAltName=DNS:localhost,DNS:keycloak,DNS:openldap,DNS:pebble,DNS:*.stalwart.test,IP:127.0.0.1"
+  
+  # Create combined PEM for services that need it
+  cat "$CERT_DIR/cert.pem" "$CERT_DIR/key.pem" > "$CERT_DIR/combined.pem"
+  
+  # Create PKCS12 for Keycloak
+  openssl pkcs12 -export -in "$CERT_DIR/cert.pem" -inkey "$CERT_DIR/key.pem" \
+    -out "$CERT_DIR/keystore.p12" -name localhost -password pass:changeit
+  
+  chmod 644 "$CERT_DIR"/*
+  echo "Certificates generated."
+else
+  echo "Certificates already exist."
+fi

tests/docker/scripts/init-fdb.sh

@@ -0,0 +1,18 @@
+#!/bin/bash
+set -eu
+
+for i in $(seq 1 30); do
+    if fdbcli --exec 'status minimal' --timeout 5 2>&1 | grep -q "The database is available"; then
+        echo "FoundationDB already configured."
+        exit 0
+    fi
+    if fdbcli --exec 'configure new single memory' --timeout 5 2>&1 | grep -q "Database created"; then
+        echo "FoundationDB configured."
+        exit 0
+    fi
+    echo "Waiting for FoundationDB to be ready (attempt $i)..."
+    sleep 2
+done
+
+echo "ERROR: Failed to configure FoundationDB after retries" >&2
+exit 1

tests/docker/scripts/init-minio.sh

@@ -0,0 +1,12 @@
+#!/bin/bash
+set -e
+
+# Wait for MinIO to be ready
+echo "Waiting for MinIO..."
+until mc alias set local http://minio:9000 minioadmin minioadmin 2>/dev/null; do
+  sleep 1
+done
+
+# Create the stalwart bucket
+mc mb local/stalwart --ignore-existing
+echo "MinIO bucket 'stalwart' created."