Tracking issue: custom CA certificate support

Trying to track the recent changes that allow easier configuration of custom CA certificate for constrained environments and the backports - [x] Support `--use-system-ca` for macOS https://github.com/nodejs/node/pull/56599 - [x] Support `--use-system-ca` for Windows https://github.com/nodejs/node/pull/56833 - [x] Support `--use-system-ca` for other Unix-like platforms: https://github.com/nodejs/node/pull/57009 - [x] JS API to query CA certificates: https://github.com/nodejs/node/pull/57107 - [x] JS API to configure the CA certificates https://github.com/nodejs/node/pull/58822 - [x] Encouraging use of `--use-system-ca` in certificate errors: https://github.com/nodejs/node/pull/57362 - [x] Fixing leak of `--use-system-ca` https://github.com/nodejs/node/pull/56832 - [x] Add NODE_USE_SYSTEM_CA=1 https://github.com/nodejs/node/pull/59276 - [x] Load system CA certificates off thread https://github.com/nodejs/node/pull/59550 - [x] Only load certificates off thread when tls is used https://github.com/nodejs/node/pull/59856 - [x] Make `--use-system-ca` a per-env option so that workers can enable/disable them individually https://github.com/nodejs/node/pull/60678 - [ ] Graceful handling of invalid certificates: https://github.com/nodejs/node/pull/61784 https://github.com/nodejs/node/pull/62576 - [ ] Implement certificate distrust on Windows to match Chromium's policy: https://github.com/nodejs/node/blob/5623194a6b16192084d2753a80c350c4ae3dec24/src/crypto/crypto_context.cc#L647-L648 - [ ] Make NODE_USE_SYSTEM_CA=0 disable system CA if it gets enabled by default - [ ] Provide a build-time option to enable `--use-system-ca` by default - [ ] Enable --use-system-ca by default