fix(tls): stop inferring inspection trust anchors

[ryanfowler]

Summary

• keep TLS inspection output limited to peer-provided certificates
• report the platform-selected trust anchor as unavailable instead of inferring it from DN, AKI, or SKI metadata
• add collision and verified/insecure rendering coverage
• document the trust-anchor output

Checks

• cargo fmt --check
• cargo clippy --locked --all-targets --all-features -- -D warnings
• cargo test --locked --all-features --lib --bins
• cargo test --locked --all-features --test network tls_certificate_validation_inspection_and_bounds_cases -- --test-threads=1
• cargo test --locked --all-features --test cli --test formatting --test grpc --test har --test http --test install --test network --test terminal --test update --test websocket -- --test-threads=2
• prettier -w docs/advanced-features.md