fix: correct SSL and SSH parsing in foreign app importers

[datlechin]

Summary

Fixes #887. PostgreSQL connections imported from TablePlus fail with FATAL: no pg_hba.conf entry for host..., no encryption because the SSL mode is lost during import.

Full analysis revealed bugs across all three importers:

• TablePlus: tLSMode=0 (Prefer) was treated as "SSL disabled", and all non-zero modes were hardcoded to "Required". Now correctly maps all 4 TablePlus TLS modes (Prefer, Required, Verify CA, Verify Identity)
• DBeaver: SSL configuration from handlers.ssl was not parsed at all. Now reads SSL mode and certificate paths following the same handler pattern as the existing SSH tunnel parsing
• Sequel Ace: SSH port was read as String but Sequel Ace stores it as Int, causing custom SSH ports to silently default to 22. Now uses the Int-then-String pattern
• TablePlus: SSH key passphrases were not imported from the TablePlus keychain

Test plan

• All 24 TablePlus importer tests pass (3 new SSL mode tests + 1 renamed)
• All 31 DBeaver importer tests pass (7 new SSL tests)
• All 22 Sequel Ace importer tests pass (2 new SSH port type tests)

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3836284d39

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Handle DBeaver disable SSL mode explicitly

The new SSL-mode mapping treats every unrecognized sslMode as Preferred, so a DBeaver config that stores sslMode as disable (or any other non-listed value) is imported as TLS-enabled instead of TLS-disabled. That changes connection behavior during import and can cause connection failures or unexpected encryption settings; this switch should explicitly map known modes (including disable) and avoid defaulting unknown values to Preferred.

Useful? React with 👍 / 👎.