TLS certificate management for Erlang distribution.
Generates a self-signed CA and per-node certificates on first run.
Two Vibe instances trust each other if they share the same CA — copy
~/.vibe/tls/ca.pem to establish trust between machines.
Writes an inet_tls_dist option file that configures mutual TLS
for Erlang distribution with verify_peer.