fix: add TLS certificate bundle for HTTPS connections

All HTTP clients (Telegram, Claude API, OTA) were missing
crt_bundle_attach, causing TLS handshake failures. Add esp-tls
dependency to CMakeLists.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

main/ota/ota_manager.c

@@ -3,6 +3,7 @@
 #include "esp_log.h"
 #include "esp_ota_ops.h"
 #include "esp_http_client.h"
+#include "esp_crt_bundle.h"
 #include "esp_https_ota.h"
 
 static const char *TAG = "ota";
@@ -15,6 +16,7 @@ esp_err_t ota_update_from_url(const char *url)
         .url = url,
         .timeout_ms = 120000,
         .buffer_size = 4096,
+        .crt_bundle_attach = esp_crt_bundle_attach,
     };
 
     esp_https_ota_config_t ota_config = {