/compliance-report

Use the nhi MCP server to produce a structured compliance report.

1. Inventory — call list_realms, list_issuing_policies, list_trust_stores, and list_certificates (paginate) to collect total counts for each.
2. Certificate health — group certificates by status (active / expired / revoked / retired). Flag any active certificates past their not_after date, and any with no associated issuing policy.
3. Trust store coverage — for each trust store call list_trust_store_certificates and record the certificate count.
4. Output — print a markdown report with these sections:
   • # NHI Compliance Report with today's date
   • Summary table (Metric / Count)
   • Certificate Status Breakdown
   • Realms
   • Issuing Policies
   • Trust Stores
   • Action Items — any findings that need attention (expired certs, empty trust stores, etc.)

Only use MCP tools — do not call HTTP endpoints directly.