pub fn resolve_ca_bundle_path() -> Option<PathBuf>
Resolve a usable CA bundle file path for TLS verification.
Resolution order:
CURL_CA_BUNDLE
SSL_CERT_FILE
/etc/ssl/certs/ca-certificates.crt