[datlechin]

Summary

• Connection dialog: the socket switch and the driver switch build their TLS state from new_connection_tls, the mode fix(core): start a new connection on the TLS mode the engine's own client uses #4051 made TlsFormState::new take. feat(linux): connection URLs and Unix sockets for PostgreSQL and MySQL #4048's call sites still passed the capabilities, which broke the app build on main.
• Driver switch back to a network host restores the network TLS state, then follow_tls_default resets a mode the new driver does not offer, the same rule the form already applies.
• Windows ConnectionDraft: the merge of fix(core): start a new connection on the TLS mode the engine's own client uses #4051 copied Apply's certificate lines into FollowTlsDefault, where url is out of scope (CS0103 on both Windows jobs). Apply keeps them.
• Cassandra relay test: waits for the transport's connect timeout plus 5 s instead of a fixed 5 s. A refused loopback connect on Windows is retried for about 2 s and took longer on a loaded runner (Core (Windows x64), run 42151126358).

Test plan

• Main run 42151126358 failed linux / Fast checks with E0308 in connect_dialog/mod.rs and core / Core (Windows x64) in relay::tests::a_failed_open_is_kept_for_the_connect_to_report. windows / Windows (Arm64) failed with CS0103 in ConnectionDraft.cs.
• cargo clippy -p tablepro --all-targets -- -D warnings passes in the Linux dev container; TablePro.App.Model.Tests compiles on macOS.