Add live TLS certificate probing and improve restart error handling.

Configure CertificateCheckUrl per container for curl-like TLS checks, classify Sonic permission errors, and extend setup wizard for container management.

Co-authored-by: Cursor <cursoragent@cursor.com>

ZA.CoreService.ESBCertificateManager/Models/SetupCatalogModels.cs

@@ -26,6 +26,11 @@ public sealed class ContainerOption
 
     public string? ContainerDisplayName { get; init; }
 
+    /// <summary>
+    /// Endpoint für TLS-Zertifikatsprüfung, z. B. https://host:8443 oder host:8443.
+    /// </summary>
+    public string? CertificateCheckUrl { get; init; }
+
     public required string CompanyCode { get; init; }
 
     public required string ConnectionName { get; init; }