Share TLS client trust policy

[kcosr]

Summary

• replace the nested PEM-only Access Flow trust schema with required flat four-mode trust settings
• use Access Runtime for native/custom trust loading, verification, custody, and candidate accounting
• preserve atomic relay reloads with bounded operation cancellation, readiness, blocked-reload recovery, and generation leases

Verification

• Keel iterative review clean after two remediation cycles
• full all-target/all-feature suite: 717 library tests plus integration suites
• strict Clippy, formatting, Runtime pin validation, and mutation tests

Native macOS and Windows execution remains unavailable on this Linux host.