Post-Quantum PKI educational demos — Trust the transition to quantum-safe cryptography

PKCS#11 NG CryptoToken plugin for EJBCA CE with post-quantum cryptography support. Adds ML-DSA, ML-KEM, SLH-DSA and hybrid certificates via pure JNA bindings (JackNJI11) — no SunPKCS11 dependency.

Browser-based post-quantum migration planner for operational teams. Hybrid X.509 certs (ECDSA-P256 + ML-DSA-65), multi-jurisdiction regulatory timelines (CNSA 2.0, NIS, NCSC, BSI...), and a rolling key-rotation simulator with canary and rollback.

Provide a PKCS#11 NG CryptoToken for EJBCA CE with RSA, EC, and post-quantum crypto support via JNA bindings