Certificate inspection and clearer output

This release makes atra (Atrahasis CLI) show more of what it sees, both about the connection and about the certificate behind it.

• Certificate inspection works on certificates that cannot be trusted. -C now reads the certificate without needing a successful, trusted connection, so expired, self signed and hostname mismatch certificates are shown. Even when the connection ultimately fails, the certificate is still captured and displayed.
• A validation summary comes with it. -C output includes a Validation block computed from the parsed certificate, with no extra network request: expiry status, hostname matching against SAN (including *. wildcards) and CN, and self signed detection. Green when valid, red when it needs attention.
• Assertion results read more clearly. Status equals 404 → Got: 200 replaces the older wording, where the assertion name ran into the next word. The exit code is unchanged.
• --json reports timing per phase. The timing object now carries dns_ms, tcp_ms, tls_ms, request_send_ms, server_response_ms and download_ms alongside total_ms, at microsecond precision. Existing fields are unchanged.
• -v shows what was actually sent. Verbose output lists the headers atra sends, including Host, User-Agent, Accept, Accept-Encoding and Content-*, rather than only the ones you passed. It ends with a compact timing line in the same units as -t.
• TLS problems say what is likely happening. When a server does not return a valid TLS response, the message points at a proxy, firewall or captive portal rather than surfacing a low level error.
• The User-Agent tracks the release. Atrahasis CLI/1.1.0, kept in sync with the version.