Ensure SSL_CERT_DIR messages are always shown and check for existing value

[tomerqodo]

Benchmark PR from qodo-benchmark#82

[augmentcode]

🤖 Augment PR Summary

Summary: This PR improves how dotnet-dev-certs reports OpenSSL trust guidance on Unix.

Changes:

• Updated OpenSSL/SSL_CERT_DIR guidance messages and added events for “already configured” and “append to variable” cases.
• Enhanced Unix trust flow to detect whether SSL_CERT_DIR is already set and contains the dev-certs directory.
• Ensured SSL_CERT_DIR-related messages are emitted without requiring --verbose by always registering a reporter event listener and enabling LogAlways events.
• Refactored NssDb away from primary-constructor syntax.

Technical Notes: Non-verbose runs now subscribe to EventLevel.LogAlways for CertificateManager.Log so users consistently see environment variable instructions.

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. 2 suggestions posted.

Comment augment review to trigger a new review at any time.

[augmentcode]

certDirFullPath is derived from prettyCertDir, which can contain the literal $HOME prefix; that makes Path.GetFullPath(prettyCertDir) unlikely to match the real absolute paths typically stored in SSL_CERT_DIR, so isCertDirIncluded may be false even when correctly configured.

_{🤖 Was this useful? React with 👍 or 👎}

[augmentcode]

This assignment overwrites any earlier sawTrustFailure state (e.g., NSS trust failures above), which can change the final TrustLevel from partial to full (or vice-versa) based solely on SSL_CERT_DIR configuration.

_{🤖 Was this useful? React with 👍 or 👎}