feat: move step-ca into a plugin (C4)

src/ui/locales/en.json

@@ -643,8 +643,6 @@
     "keyPassphraseSaved": "Passphrase saved, type to change",
     "replaceKey": "Replace key",
     "docsLink": "View docs",
-    "stepcaLabel": "Step CA",
-    "stepcaDesc": "Sign in through your identity provider and let your Step CA issue a short-lived SSH certificate for this host. The CA URL, root fingerprint and OIDC provisioner are set by an administrator under Admin Settings.",
     "agentLabel": "SSH Agent",
     "agentDesc": "Authenticate using an SSH agent running on the Termix server (Bitwarden, 1Password, gpg-agent, KeeAgent, ssh-agent). The agent must be running on the machine where Termix is hosted.",
     "agentAuthenticationDesc": "Use keys from an SSH agent to authenticate this connection. Leave the socket path empty to use SSH_AUTH_SOCK.",
@@ -1995,15 +1993,6 @@
         "admin": "Administration"
       }
     },
-    "stepCa": "Step CA",
-    "stepCaDesc": "Issue short-lived SSH certificates from a smallstep CA. Enter the CA URL, its root fingerprint (as shown by step ca bootstrap) and the name of the OIDC provisioner; then choose \"Step CA\" as a host's authentication type. Leave all three empty to disable.",
-    "stepCaFingerprint": "Root fingerprint (SHA-256)",
-    "stepCaProvisioner": "OIDC provisioner name",
-    "stepCaSaved": "Step CA settings saved",
-    "stepCaSaveFailed": "Failed to save Step CA settings",
-    "stepCaPrivateEndpoints": "Allowed private Step CA hosts",
-    "stepCaPrivateEndpointsDesc": "Private hosts the Step CA certificate flow may contact: the CA itself and, if internal, your identity provider. Separate them with commas.",
-    "updateStepCaEndpointsFailed": "Failed to update the Step CA endpoint allowlist",
     "notificationPrivateEndpoints": "Allowed private notification hosts",
     "notificationPrivateEndpointsDesc": "Exact private hosts that notification channels may contact. Separate them with commas.",
     "updateNotificationEndpointsFailed": "Failed to update notification endpoint allowlist",