Make --use-system-ca per-env rather than per-process

[Aditi-1400]

Makes the --use-system-ca option a per-environment option rather than a per-process option so that workers can enable/disable them individually

[nodejs-github-bot]

Review requested:

• @nodejs/config
• @nodejs/crypto
• @nodejs/startup

[joyeecheung]

Hmm, I think this may need more work than just updating the options - the implication of being per-env is that each worker would then be able to toggle this independently. Say when the main thread does not enable it but a worker does, then the worker will have the system CA certs in their default store but the parent doesn't. Can you add a test for this, and the other way around (parent enables it, worker disables it)? My impression is that the default store initialisation code is not yet ready for this and it's still shared across the process (so if a worker enables it, suddenly the parent get it too, which would be unexpected).

[codecov]

Codecov Report

❌ Patch coverage is 80.48780% with 8 lines in your changes missing coverage. Please review.
✅ Project coverage is 88.53%. Comparing base (c0108bf) to head (d9fb49d).
⚠️ Report is 20 commits behind head on main.

Files with missing lines	Patch %	Lines
src/quic/tlscontext.cc	58.33%	5 Missing ⚠️
src/crypto/crypto_context.cc	86.95%	0 Missing and 3 partials ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #60678      +/-   ##
==========================================
- Coverage   88.53%   88.53%   -0.01%     
==========================================
  Files         703      703              
  Lines      208496   208547      +51     
  Branches    40213    40216       +3     
==========================================
+ Hits       184601   184635      +34     
- Misses      15915    15929      +14     
- Partials     7980     7983       +3     

Files with missing lines	Coverage Δ
src/crypto/crypto_common.cc	79.67% <100.00%> (ø)
src/crypto/crypto_context.h	100.00% <ø> (ø)
src/node.cc	75.87% <ø> (-0.17%)	⬇️
src/node_options.cc	77.92% <100.00%> (+0.02%)	⬆️
src/node_options.h	97.89% <100.00%> (ø)
src/quic/endpoint.cc	56.51% <100.00%> (ø)
src/quic/tlscontext.h	65.38% <ø> (ø)
src/crypto/crypto_context.cc	71.16% <86.95%> (+0.32%)	⬆️
src/quic/tlscontext.cc	36.85% <58.33%> (ø)

... and 34 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.