Generates a self-signed certificate at startup for HTTPS. Required for mic access on Android/remote browsers (getUserMedia needs a secure context). Usage: wzp-web --port 9090 --relay 127.0.0.1:4433 --tls Browser: accept the self-signed cert warning, then mic works. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>