fix: tighten tls fingerprints and approval events

src/infra/tls/fingerprint.test.ts

@@ -0,0 +1,11 @@
+import { describe, expect, it } from "vitest";
+
+import { normalizeFingerprint } from "./fingerprint.js";
+
+describe("normalizeFingerprint", () => {
+  it("strips sha256 prefixes and separators", () => {
+    expect(normalizeFingerprint("sha256:AA:BB:cc")).toBe("aabbcc");
+    expect(normalizeFingerprint("SHA-256 11-22-33")).toBe("112233");
+    expect(normalizeFingerprint("aa:bb:cc")).toBe("aabbcc");
+  });
+});