feat(virtual-hosts): add TLS option for HTTPS/443 backends

- Add "Use TLS (secure connection)" checkbox in Add Virtual Host modal
- Persist and restore useTls in state; show TLS badge in table
- When enabled, HTTPS proxy connects to tunnel backend over TLS (SNI =
  hostname) for HTTP and WebSocket; supports services on port 443

native-host/holesail-manager/index.js

@@ -30,7 +30,7 @@ function saveState() {
     id: s.id, port: s.port, host: s.host, secure: s.secure, udp: s.udp || false, label: s.label || ''
   }));
   const virtualHostsList = vhostsModule.getVirtualHosts()
-    .map(v => ({ hostname: v.hostname, hsUrl: v.hsUrl }));
+    .map(v => ({ hostname: v.hostname, hsUrl: v.hsUrl, useTls: v.useTls === true }));
   const serviceTunnelsList = svcModule.getServiceTunnels().map(t => ({
     id: t.id, label: t.label, hsUrl: t.hsUrl, localPort: t.localPort
   }));