No custom CA certificate support for enterprise environments

[brandonrc]

Problem

Enterprise environments often use internal Certificate Authorities. The CLI has no mechanism to trust custom CA certificates, making it unusable behind corporate TLS inspection proxies or with self-signed certificates on internal registries.

Suggested Fix

Add support for custom CA certificates via:

1. --ca-cert <path> CLI flag
2. AK_CA_CERT environment variable
3. Load the certificate and add it to the reqwest client's certificate store

Source

Quality audit, 2026-03-23.