Self-hosted Kura cache nodes with per-account mesh enrollment

You can now run your own Kura cache nodes on your own infrastructure and bridge them into the same mutually authenticated mesh as Tuist-managed nodes. Each account gets its own certificate authority for mesh enrollment, and self-hosted nodes receive a tenant-scoped credential and URL from the account’s Cache page. They authenticate cache requests through Tuist without receiving any cross-tenant signing secret, register themselves via heartbeats, and can push writes into the managed mesh through a gateway. A node also warms its cache from the managed mesh when it joins.