feat(auth,client-registry): add Noise IK client authentication with managed client registry and per-client ACL controls

test/test.loadtest.node.ts

@@ -144,12 +144,17 @@ let keypair: IVpnKeypair;
 let throttle: ThrottleProxy;
 const allClients: VpnClient[] = [];
 
+let clientCounter = 0;
 async function createConnectedClient(port: number): Promise<VpnClient> {
+  clientCounter++;
+  const bundle = await server.createClient({ clientId: `load-client-${clientCounter}` });
   const c = new VpnClient({ transport: { transport: 'stdio' } });
   await c.start();
   await c.connect({
     serverUrl: `ws://127.0.0.1:${port}`,
     serverPublicKey: keypair.publicKey,
+    clientPrivateKey: bundle.secrets.noisePrivateKey,
+    clientPublicKey: bundle.smartvpnConfig.clientPublicKey,
     keepaliveIntervalSecs: 3,
   });
   allClients.push(c);