Fix IPv6 literals in TLS inspection connect path

[ryanfowler]

Summary

• Fixed TCP TLS inspection to resolve the target with lookup_host((host, port)) instead of building a raw host:port string.
• Preserved the original host for SNI while normalizing URL host handling for IPv4, IPv6, and DNS names.
• Added a regression test covering --inspect-tls against an IPv6 loopback server.

Testing

• cargo fmt
• cargo clippy --locked --all-targets --all-features -- -D warnings
• cargo test --all-features tls::inspect::tests
• cargo test --all-features tls::inspect::tests::inspect_tcp_supports_ipv6_loopback_literals