fix: tighten tls fingerprints and approval events

src/infra/tls/fingerprint.ts

@@ -0,0 +1,5 @@
+export function normalizeFingerprint(input: string): string {
+  const trimmed = input.trim();
+  const withoutPrefix = trimmed.replace(/^sha-?256\s*:?\s*/i, "");
+  return withoutPrefix.replace(/[^a-fA-F0-9]/g, "").toLowerCase();
+}