Summary

• add a Node/Electron TLS helper that merges default, NODE_EXTRA_CA_CERTS, and system certificate stores
• use it before Codiff share upload fetches and include targeted diagnostics for certificate-chain failures
• add focused tests for certificate merging, retry behavior, upload ordering, and TLS diagnostics

Validation

• pnpm exec vp check --fix
• pnpm exec vp build
• pnpm exec vp test electron/tests/system-certificates.test.ts electron/tests/shared-walkthrough-upload.test.ts