feat: move step-ca into a plugin (C4)

src/backend/plugins/ctx-notify.ts

@@ -147,6 +147,12 @@ export function createPluginFetch(deps: Deps): PluginFetch {
             signal: controller.signal,
           },
           (init.allowPrivateHosts ?? []).map((host) => host.toLowerCase()),
+          {
+            ...(init.tls?.ca ? { ca: init.tls.ca } : {}),
+            ...(init.tls?.rejectUnauthorized === false
+              ? { rejectUnauthorized: false }
+              : {}),
+          },
         );
       } finally {
         clearTimeout(timer);