WIP: Ticket32622 (for 044): Report better bootstrap errors on TLS failures

Previously we mapped all read-time TLS errors to MISC, and we forgot to record TLS errors on write or handshake. This caused issues like #32622 (closed), where we reported useless bootstrap problems.

Now we have a facility for the TLS objects to remember their last error messages, so that they can report meaningful errors. Miscellaneous TLS errors now map to TLS_ERROR, and we note TLS errors whenever they occur.

Closes #32622 (closed)