[pico] refactor(pgs): use redis for central tls cert storage

[zmx] feat(snapshot): daemon sends libghostty snapshots instead of raw bytestream