Users ask whether OpenAEV enforces certificate validation server-side. Add a dedicated doc page covering default behavior, custom CA certs, and SSL/TLS termination. PR: #259