Add grpcserver test coverage

- Add comprehensive test file for internal/grpcserver package
- Cover interceptors, system, engine, policy, and auth handlers
- Cover pbToRule/ruleToPB conversion helpers
- 37 tests total; CA/PKI/ACME and Login/Logout skipped (require live deps)

Co-authored-by: Junie <junie@jetbrains.com>

internal/grpcserver/acme.go

@@ -6,8 +6,9 @@ import (
 
 	"google.golang.org/grpc/codes"
 	"google.golang.org/grpc/status"
+	"google.golang.org/protobuf/types/known/timestamppb"
 
-	pb "git.wntrmute.dev/kyle/metacrypt/gen/metacrypt/v1"
+	pb "git.wntrmute.dev/kyle/metacrypt/gen/metacrypt/v2"
 	internacme "git.wntrmute.dev/kyle/metacrypt/internal/acme"
 	"git.wntrmute.dev/kyle/metacrypt/internal/engine"
 )
@@ -46,7 +47,7 @@ func (as *acmeServer) SetConfig(ctx context.Context, req *pb.SetConfigRequest) (
 		as.s.logger.Error("grpc: acme set config", "error", err)
 		return nil, status.Error(codes.Internal, "failed to save config")
 	}
-	return &pb.SetConfigResponse{Ok: true}, nil
+	return &pb.SetConfigResponse{}, nil
 }
 
 func (as *acmeServer) ListAccounts(ctx context.Context, req *pb.ListAccountsRequest) (*pb.ListAccountsResponse, error) {
@@ -68,7 +69,7 @@ func (as *acmeServer) ListAccounts(ctx context.Context, req *pb.ListAccountsRequ
 			Status:        a.Status,
 			Contact:       contacts,
 			MciasUsername: a.MCIASUsername,
-			CreatedAt:     a.CreatedAt.String(),
+			CreatedAt:     timestamppb.New(a.CreatedAt),
 		})
 	}
 	return &pb.ListAccountsResponse{Accounts: pbAccounts}, nil
@@ -95,8 +96,8 @@ func (as *acmeServer) ListOrders(ctx context.Context, req *pb.ListOrdersRequest)
 			AccountId:   o.AccountID,
 			Status:      o.Status,
 			Identifiers: identifiers,
-			CreatedAt:   o.CreatedAt.String(),
-			ExpiresAt:   o.ExpiresAt.String(),
+			CreatedAt:   timestamppb.New(o.CreatedAt),
+			ExpiresAt:   timestamppb.New(o.ExpiresAt),
 		})
 	}
 	return &pb.ListOrdersResponse{Orders: pbOrders}, nil