chore: additional error categories for macOS cert api

[deepak1556]

For #287739

Additional error categories to tls.getSystemCACertificatesErrors api

TotalCertsToProcess      - Total keychain certs before filtering
                             (error_code = count)

  SecItemCopyMatching      - Keychain query failed entirely (fatal)

  SecCertificateCopyData   - Failed to extract DER data from
                             SecCertificateRef

  DERDecode                - OpenSSL d2i_X509 failed to parse DER bytes

  TrustSettingsCopy        - SecTrustSettingsCopyTrustSettings returned
                             unexpected OSStatus

  TrustEvaluation          - Certificate rejected by
                             IsCertificateTrustedForPolicy (excluded
                             from final cert list)

  TrustDictDefaultTrustRoot - Self-issued cert with absent
                              kSecTrustSettingsResult key: Apple docs
                              default to TrustRoot (Chromium returns
                              TRUSTED), Node.js returns UNSPECIFIED

  TrustPolicyComparison    - Compares SecPolicyCreateSSL(false) vs
                             SecPolicyCreateSSL(true) results per cert.
                             error_code: 0=both fail, 1=server-only,
                             2=client-only, 3=both pass

  TrustEvalFallback        - Cert had no explicit trust settings, fell
                             through to SecTrustEvaluateWithError
                             (no Chromium equivalent). error_code:
                             1=trusted, 0=rejected

  Duplicate                - Same cert found in multiple keychains

  Expired                  - Trusted cert with notAfter in the past
                             (Chromium would filter; Node.js still
                             includes)

  UnsupportedKeyUsage      - Trusted cert lacking SSL key usage flags
                             (Chromium would filter; Node.js still
                             includes)

[Copilot]

Pull request overview

This PR updates the pinned Microsoft build identifiers for the Electron (root) and Node (remote) native header downloads, presumably to pick up macOS system certificate error-category changes referenced in the linked issue.

Changes:

• Bump Electron headers ms_build_id in .npmrc.
• Bump Node headers ms_build_id in remote/.npmrc.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.npmrc	Updates Electron headers ms_build_id to a newer Microsoft build.
remote/.npmrc	Updates Node headers ms_build_id to a newer Microsoft build for remote builds.