UNABLE_TO_VERIFY_LEAF_SIGNATURE during pnpm tarball downloads with strict-ssl disabled and custom ca configured
Corporate networks that intercept TLS often require pnpm to trust a custom certificate authority while also disabling strict SSL validation. In these environments, pnpm install can fail with UNABLE_TO_VERIFY_LEAF_SIGNATURE even after both strict-ssl=false and a custom ca or cafile are configured. The uncertainty is that pnpm's fetcher appears to apply these
