feat(server): add mTLS certificate bootstrap via JWT for Home connections

- Introduced `-home-jwt` flag and `HOME_JWT` environment variable to provide JWT for mTLS certificate generation.
- Added new APIs to handle certificate requests, validate JWT claims, and manage local certificate files.
- Updated Home TLS configuration to support client certificates, keys, and dynamic server name resolution.

internal/config/home.go

@@ -12,8 +12,11 @@ type HomeConfig struct {
 
 // HomeTLSConfig configures client-side TLS for the home Redis connection.
 type HomeTLSConfig struct {
-	Enable             bool   `yaml:"enable" json:"-"`
-	ServerName         string `yaml:"server-name" json:"-"`
-	InsecureSkipVerify bool   `yaml:"insecure-skip-verify" json:"-"`
-	CACert             string `yaml:"ca-cert" json:"-"`
+	Enable              bool   `yaml:"enable" json:"-"`
+	ServerName          string `yaml:"server-name" json:"-"`
+	InsecureSkipVerify  bool   `yaml:"insecure-skip-verify" json:"-"`
+	CACert              string `yaml:"ca-cert" json:"-"`
+	ClientCert          string `yaml:"-" json:"-"`
+	ClientKey           string `yaml:"-" json:"-"`
+	UseTargetServerName bool   `yaml:"-" json:"-"`
 }