fix: inline SslBumpConfig parameter type to fix declaration emit with non-exported interface

Agent-Logs-Url: https://github.com/github/gh-aw-firewall/sessions/d3d6437d-fcec-4fe2-b8a8-fd6939900785

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Author: Copilot

src/ssl-bump.ts

@@ -178,7 +178,7 @@ export function cleanupSslKeyMaterial(workDir: string): void {
  * @returns Paths to generated CA files
  * @throws Error if OpenSSL commands fail
  */
-export async function generateSessionCa(config: SslBumpConfig): Promise<CaFiles> {
+export async function generateSessionCa(config: { workDir: string; commonName?: string; validityDays?: number }): Promise<CaFiles> {
   const { workDir, commonName = 'AWF Session CA', validityDays = 1 } = config;
 
   // Create ssl directory in workDir, backed by tmpfs when possible