Function post_cms_simpleenroll 

pub async fn post_cms_simpleenroll(
    label: LabelExtractor,
    __arg1: State<Arc<AppState>>,
    body: Bytes,
) -> Result<Response, KipukaError>

POST /.well-known/est/cms/simpleenroll

CMS-wrapped simple enrollment (RFC 8295 §4 + RFC 7030 §4.2).

Request

Header	Value
Content-Type	application/pkcs7-mime
Body	DER-encoded CMS SignedData wrapping a PKCS#10 CSR

Processing

1. Verify CMS SignedData signature and signer certificate chain.
2. Extract the PKCS#10 CSR payload from the signed content.
3. Extract signer identity for authorization.
4. Delegate to the standard enrollment logic.
5. Optionally wrap the response certificate in CMS EnvelopedData.

Response

Header	Value
Content-Type	application/pkcs7-mime
Body	DER-encoded CMS EnvelopedData (or raw cert if encryption disabled)