Custom root pools and proxy trust after CVE-2026-111943

Technical analysis of CVE-2026-111943 in Go crypto/x509, including affected versions, certificate-chain impact, remediation, and evidence limits.