UI for new client cert OS store options

[kenjenkins]

Summary

pomerium-cli now has new options for searching the system trust store for a client certificate: by default it will look for a certificate matching any trusted CA names from the TLS handshake, but additionally it can filter by a single Issuer Name attribute and/or a single Subject Name attribute.

Add corresponding UI to the Desktop Client:

• add a 'Client certificates' section heading under the 'Advanced settings' panel
• move existing file upload / text entry UI behind a nested accordion labelled 'Set client certificate manually'
• add a 'Search OS certificate store' toggle button (this corresponds to the --client-cert-from-store CLI option)
• add an 'Additional OS certificate store filters' nested accordion with Issuer Name and Subject Name settings (these correspond to the --client-cert-issuer and --client-cert-subject CLI options)

Screenshot of the new section, no options selected:

Screenshot of the new nested filters accordion, no filters entered:

Screenshot of the new nested filters accordion, one filter entered:

Note: lint was complaining about unused variables in a TypeScript function type annotation, so I added plugin:@typescript-eslint/recommended to the configuration—this fixed the warning but I needed to turn off a few related rules with existing errors.

Related issues

• Integrate support for client certificates from OS-specific trust store #312

Checklist

• reference any related issues
• updated docs
• updated unit tests
• updated UPGRADING.md
• add appropriate tag (improvement / bug / etc)
• ready for review

[nhayfield]

Lgtm