Fix run uploads behind a private CA

A station logged in to a self-hosted instance with --ca-cert showed online, but its run uploads never reached the server: the upload path did not trust the private CA unless it was also installed in the OS trust store.

• Fixed run uploads, the offline upload queue and tofupilot link to trust the certificate passed with --ca-cert, as login and the live link already did
• Improved CA file handling: the file is read once per process and a missing or malformed file warns once instead of on every upload
• Added a build-time guard so every network client in the CLI carries the configured CA