Proxy mode: support custom registry hostnames and custom CA trust for upstream TLS verification

[Sahilb315]

PMG proxy mode now enforces upstream TLS verification (and TLS min version in #158), which is good for security but breaks some enterprise setups that use internal registries (for example, JFrog/Artifactory) with private/custom CAs.