Post-quantum migration is not just RSA to PQC. PKI teams must map certificates, CAs, HSMs, trust stores, apps, and devices.