Adds CAA Records and mixed content checks, and improves accuracy for other HTTPs

[lissy93]

Couple new data points, and accuracy improvements to existing ones:

• New CAA Records check, showing which certificate authorities can issue certs for the domain
• New Mixed Content check, for insecure resources and third-party scripts without SRI
• HTTP Security shows each header's value, and flags weak ones like unsafe-inline or max-age=0
• TLS Connection lists the TLS versions a server accepts, so old 1.0 and 1.1 support stands out
• SSL Certificate adds alt names, key type, lifetime and the full chain
• Email Configuration now checks MTA-STS, TLS-RPT and DANE
• Server Location shows the network and ASN
• Robots.txt shows which AI crawlers are blocked, and whether the site has an llms.txt
• Server Status breaks response time into steps like DNS and TLS, and works on http:// sites
• security.txt flags a missing Contact field, or a missing or expired Expires date
• Better at spotting bot check pages (now including DataDome), so fewer misleading results
• security.txt no longer hangs, and reads files sent as UTF-16
• API: http-security returns header values instead of true, and status drops dnsLookupTime

[netlify]

✅ Deploy Preview for web-check ready!

Name	Link
🔨 Latest commit	55e4af6
🔍 Latest deploy log	https://app.netlify.com/projects/web-check/deploys/6ac383c02e837100088c29c1
😎 Deploy Preview	https://deploy-preview-349--web-check.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.