Self-hosted Kura cache nodes with per-account mesh CA enrollment

You can now run your own Kura cache nodes in your own infrastructure, enrolled into the same mutually authenticated mesh as your Tuist-managed nodes. Each account gets its own certificate authority, so self-hosted nodes can only join their account’s mesh. The control plane handles tenant-scoped authentication, certificate issuance, and discovery via heartbeats, so you provide only a credential and a URL. Writes through your self-hosted nodes replicate into the managed cache, and the node warms from the managed cache when it joins.