KIP-398 — Support reading trust store from classpath

Discussion Security

Extends SSL truststore loading to support classpath resources in addition to filesystem paths via a `classpath:` URI scheme in `ssl.truststore.location`. Eliminates the need to distribute a separate truststore file when packaging a Kafka client or Connect plugin as a fat JAR, simplifying certificate management in containerized and CI environments.

Details