utils/smartcard: add add_cert_key_by_path helper

[krishnavema]

Combine initialize_card + add_key + add_cert, a pattern repeated across the AD, GDM and IPA smart card tests, into a single reusable method.

[sumit-bose]

Hi,

thanks for the updates, ACK.

CI failures are unrelated.

bye,
Sumit

[spoore1]

LGTM.

My only comment is that "source" seems vague but, not enough to request changes. Code looks good and is working in local tests.

[spoore1]

Test failures not related to this new method being added:

FAILED tests/test_ipa.py::test_ipa__password_expiration_warning_does_not_overwrite_errors (ipa) - AssertionError: SSH was successful but should have failed!
assert 0 != 0
 +  where 0 = <pytest_mh.conn.ssh.SSHProcessResult object at 0x7f392ebd2850>.rc
FAILED tests/test_ldap.py::test_ldap__password_expiration_warning_does_not_overwrite_errors (ldap) - AssertionError: Missing 'Your password has expired.' in error output!
assert 'Your password has expired.' in "Warning: Permanently added 'localhost' (ED25519) to the list of known hosts.\r"
 +  where "Warning: Permanently added 'localhost' (ED25519) to the list of known hosts.\r" = <pytest_mh.conn.ssh.SSHProcessResult object at 0x7f392ed13a50>.stderr
FAILED tests/test_sudo.py::test_sudo__ldap_sudo_search_base_not_set_emits_warning (ldap) - AssertionError: Domain log must contain security warning when ldap_sudo_search_base is not set!