v0.5.2 — TLS auto-detection in setup()

What's changed

setup() now auto-detects TLS from the endpoint port

When insecure is not passed explicitly, setup() infers it from the endpoint:

• Port 443 → insecure=False (TLS)
• Any other port → insecure=True (plaintext)

Explicit insecure=True/False still takes precedence.

This means pipelines only need to update their endpoint env var — no code changes required:

# Before (plaintext to old VM):
HERALD_ENDPOINT=206.12.91.148:4317

# After (TLS to new cluster, insecure auto-detected):
HERALD_ENDPOINT=herald.chimefrb.xyz:443

No API changes — fully backward compatible.