secure_network — TLS configuration validation, certificate pinning, and cleartext detection
for OWASP MASVS-NETWORK-1 and MASVS-NETWORK-2.
All types are pure Rust policy objects and validators — they do not perform TLS handshakes. The consuming application provides raw certificate chains and TLS parameters; this crate provides the validation logic.