v1.6.6

Authenticated transport for legal-citation sources (PR #6 by @mwatola-glitch, cherry-picked + follow-up):

• EUR-Lex/CELLAR: act text is now always fetched over HTTPS — including manifestation URLs from SPARQL and, per follow-up, redirect targets (CELLAR answers 303 with an http:// Location even for https requests).
• CBOSA: a TLS certificate verification failure no longer silently downgrades to an unverified connection — it yields UNKNOWN unless the operator explicitly opts in with CBOSA_INSECURE_TLS=1; results then carry transport_tls_verified: false.

Full Changelog: v1.6.5...v1.6.6