Add verified WSS transport for legacy boards

Configure the default WSS endpoint and ISRG Root X2 trust anchor, preserve device authentication, enforce TLS and WebSocket handshake validation, and handle partial I/O and connection cleanup. Add host tests, server probes, package verification and integration documentation. Backend 443 /ws still returns HTTP 404; on-device validation remains pending.

ql-application/threadx/interface/custom_app/Makefile

@@ -13,6 +13,7 @@ MAKEFILE_PATH :=$(subst $(strip \),/,$(abspath $(lastword $(MAKEFILE_LIST))))
 SRC_FILES+= \
   custom_app.c \
   lib/cJSON/cJSON.c\
+  lib/librws/src/rws_handshake.c\
   lib/librws/src/rws_error.c\
   lib/librws/src/rws_frame.c\
   lib/librws/src/rws_list.c\
@@ -67,6 +68,8 @@ SRC_FILES+= \
   http_aofei.c \
   net_mgt.c \
   ws_talkingq.c \
+  talkingq_wss.c \
+  talkingq_root_ca.c \
   hal_key.c \
   audio.c  \
   hal_led.c \