Build tool to simulate retrieving certificate status via grpc streaming for mass revocation event

We don't have a full grasp of the crl-updater performance characteristics during a mass revocation event. We should build a tool that uses grpc streaming to retrieve certificate status analogous to the crl-updater without producing a CRL. To get a worst case approximation, the tool should be able to take two timestamps and retrieve all certificate statuses issued by given intermediate cert or that used a specific challenge type between the timestamps.

Start by tracing the crl-updater and its gRPC streaming behavior to understand how certificate statuses are retrieved without producing a CRL. Define the tool's timestamp, intermediate-certificate, and challenge-type inputs, then verify that it can retrieve all matching statuses during the selected interval and measure worst-case performance.