🔒 Add SSL certificate chain for Mei Sheng Group services

- Extract and configure Mei Sheng Group CA certificates
- Create certificate bundle for proper SSL verification
- Add SSL test script to verify connections
- Configure environment for trusted SSL connections
- Resolve SSL verification issues with Gitea and internal services
- Add comprehensive SSL setup documentation

Fixes:
- Gitea SSL verification now works with CA bundle
- Python requests can verify internal SSL certificates
- Proper certificate chain established for internal services

Note: nomad_mcp hostname has underscore causing SSL hostname mismatch
- Service works but requires SSL verification workaround

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

certs/server_cert.pem

@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----