[woksin]

Added

• The client logs a warning at connection start when TLS certificate validation is skipped for a host other than a local one, naming the hosts for the gRPC channel and OAuth token requests and how to enable validation with skipTlsValidation=false (part of Validate the server certificate by default #263)

Changed

• The connection guide recommends enabling certificate validation for every server other than a local development kernel: https://github.com/Cratis/Chronicle.TypeScript/blob/main/Documentation/connecting.md (part of Validate the server certificate by default #263)

[woksin]

Reviewer notes, not part of the release note:

• This is the first step of Validate the server certificate by default #263. The default (skipTlsValidation=true) is unchanged here. Turning validation on by default is planned for the next major, coordinated with the .NET client, and needs woksin's approval. The issue stays open for that.
• The warning is logged once per connection, not on reconnect. It has two parts:
  • the gRPC channel, when no custom credentials are passed;
  • OAuth token requests, whenever OAuth is in use, going to the authority host when one is set.
• Loopback hosts never warn.
• Locally, yarn ci (3,382 tests) and yarn test pass. The kernel integration specs run in this PR's CI.
• Review: round 1 (full review) found 2 blockers, both the same remote-authority case, plus one advisory. All three are fixed, and the round 2 quick review passed.