Function resolve_tls_root 

pub fn resolve_tls_root(config_override: Option<&Path>) -> SshCliResult<PathBuf>

Available on crate feature tls only.

Resolves the TLS root directory under the active config dir.

Priority: explicit config_override parent → XDG config dir for the app.