feat(device-plane): activate canonical outbound edge channel

infra/deploy-runner/test_device_manager_control_plane_artifacts.py

@@ -189,6 +189,18 @@ class DeviceManagerControlPlaneArtifactsTest(unittest.TestCase):
         self.assertNotIn("device-postgres", result["services"])
         self.assertIn("docker-compose.device-manager.yml", entries)
         self.assertNotIn("docker-compose.device-plane.yml", entries)
+        compose = (
+            PLATFORM_ROOT / "device-plane/docker-compose.device-manager.yml"
+        ).read_text(encoding="utf-8")
+        for required in (
+            'DEVICE_EDGE_CHANNEL_ENABLED: "true"',
+            "DEVICE_EDGE_CHANNEL_CORE_KEY_FILE: ",
+            "DEVICE_EDGE_CHANNEL_CORE_CERTIFICATE_FILE: ",
+            "DEVICE_EDGE_CHANNEL_TRUST_ROOT: ",
+            "name: nodedc-device-plane-egress",
+        ):
+            self.assertIn(required, compose)
+        self.assertNotIn("PRIVATE KEY", compose)
         checks = RUNNER.component_healthchecks("device-plane", entries, tuple(result["services"]))
         self.assertEqual(checks[0]["expected_json"]["managementApi"], "enabled")
         self.assertEqual(checks[0]["expected_json"]["discoveryIngest"], "enabled")
@@ -215,7 +227,16 @@ class DeviceManagerControlPlaneArtifactsTest(unittest.TestCase):
             [RUNNER.PLATFORM_DEVICE_CORE_INTERNAL_TOKEN_FILE],
         )
 
-        with mock.patch.object(RUNNER, "ensure_platform_runtime_secret") as ensure:
+        with (
+            mock.patch.object(
+                RUNNER,
+                "ensure_platform_runtime_secret",
+            ) as ensure,
+            mock.patch.object(
+                RUNNER,
+                "ensure_device_edge_channel_core_identity",
+            ) as ensure_edge_identity,
+        ):
             RUNNER.prepare_component_runtime(
                 "device-plane",
                 RUNNER.DEVICE_PLANE_MANAGER_CONTROL_PLANE_ENTRIES,
@@ -230,6 +251,7 @@ class DeviceManagerControlPlaneArtifactsTest(unittest.TestCase):
                 RUNNER.PLATFORM_DEVICE_CORE_INTERNAL_TOKEN_FILE,
             ],
         )
+        ensure_edge_identity.assert_called_once_with()
 
     def test_apply_gate_checks_exact_services_core_contract_and_runtime_boundary(self):
         entries = RUNNER.DEVICE_PLANE_MANAGER_CONTROL_PLANE_ENTRIES