feat(enroll): synchronous certificate pickup on all enrollment paths

CERTInext.IntegrationTests/CERTInext.IntegrationTests.csproj

@@ -24,6 +24,10 @@
     <Compile Remove="DcvLifecycleTests.cs" />
     <Compile Remove="CloudflareDomainValidator.cs" />
     <Compile Remove="StubDomainValidator.cs" />
+    <!-- Exercises DcvFollowCnameDelegation (a DCV feature) and references the
+         IntegrationTestData helper defined in DcvLifecycleTests.cs, which is excluded
+         above — so the no-DCV build must exclude this file as well. -->
+    <Compile Remove="CnameResolverLiveDnsTests.cs" />
   </ItemGroup>
 
   <ItemGroup>

CERTInext.IntegrationTests/DcvLifecycleTests.cs

@@ -119,7 +119,11 @@ private CERTInextCAPlugin BuildPlugin(bool dcvEnabled, int propagationDelaySecon
                 PageSize                   = pageSize ?? _fixture.Config.PageSize,
                 DcvEnabled                 = dcvEnabled,
                 DcvPropagationDelaySeconds = propagationDelaySeconds,
-                DcvTimeoutMinutes          = 3
+                DcvTimeoutMinutes          = 3,
+                // Inherit the fixture's disabled general enrollment-wait (0). The DCV path has its
+                // own post-DCV issuance poll (DcvWaitForIssuanceSeconds); stacking the general
+                // 50s enrollment-wait poll on top would only slow the suite without new coverage.
+                EnrollmentWaitSeconds      = _fixture.Config.EnrollmentWaitSeconds
             };
 
             return new CERTInextCAPlugin(_fixture.Client, BuildDnsFactory(), config);

CERTInext.IntegrationTests/IntegrationTestFixture.cs

@@ -125,7 +125,14 @@ public IntegrationTestFixture()
                     SignerPlace         = "Gateway",
                     SignerIp            = "127.0.0.1",
                     DefaultProductCode  = ProductCode,
-                    PageSize            = 100
+                    PageSize            = 100,
+                    // Disable the synchronous enrollment-wait poll by default: on the sandbox a
+                    // freshly-submitted DV order stays pending (it needs DCV), so the poll would
+                    // burn its full EnrollmentWaitSeconds budget (~50s) on every enroll test
+                    // before returning pending. The wait's own logic is covered by the unit suite;
+                    // a test that specifically exercises live pickup can re-enable it on its own
+                    // config. Mirrors the unit suite's BuildPlugin (PickupRetries/EnrollmentWaitSeconds=0).
+                    EnrollmentWaitSeconds = 0
                 };
 
                 Client = new CERTInextClient(Config);