feat(device-plane): harden edge channel rotation

device-plane/deployment/device-edge-core-channel-source-v1.json

@@ -22,6 +22,8 @@
     "edgeCertificatePinRequired": true,
     "coreCertificateAllowlistRequired": true,
     "unknownOrRevokedIdentity": "reject",
+    "rotation": "one-active-plus-one-staged-generation",
+    "retiredFingerprint": "reject",
     "privateKeysInSource": false,
     "privateKeysInArtifact": false
   },
@@ -42,14 +44,17 @@
     "delivery": "at-least-once-with-core-idempotency"
   },
   "sourceAcceptance": {
-    "devicePlaneTestsPassed": 189,
+    "devicePlaneTestsPassed": 193,
     "tls13MutualAuthenticationTested": true,
     "keepaliveTested": true,
     "disconnectReconnectTested": true,
+    "certificateRotationOverlapAndRetirementTested": true,
     "idempotentReplayTested": true,
     "unknownAndRevokedIdentityTested": true,
     "oversizedEnvelopeTested": true,
     "coreUnavailableRejectionTested": true,
+    "crossSessionProgressAndPerSessionOrderingTested": true,
+    "boundedAcceptanceWindowTested": true,
     "existingCoreImageBuild": "passed-no-cache",
     "existingGatewayImageBuild": "passed-no-cache"
   },