v1.11.0 — Unified TLS everywhere (one helper, two knobs)

Changed

Unified TLS across ALL integrations. A central netguard.ssl_context(cfg) builds the SSL context for the socket clients (FTP, MQTT, IMAP, SMTP) from the same two knobs the HTTP clients already use via netguard.tls_verify: ca_bundle (pin a certificate — the safe way) and tls_insecure (verification off). Secure by default everywhere; only the admin *_add tools set it.

Added

ca_bundle / tls_insecure now at EVERY TLS spot. Previously only service_add/scan_add/webdav_add/caldav_add had the full pair. ftp_add/mqtt_add gain ca_bundle; imap_add/mail_add gain both — they had no TLS opt-out at all (a self-signed LAN mail server was unreachable). One consistent convention across services, scan, webdav, caldav, ftp, mqtt, imap, smtp — no more device-by-device patching. Includes the v1.10.2 FTPS session-reuse fix (Bambu upload).