migrate away from tls.parseCertString() feat(DEP0076)

[KevinSailema]

I approached this issue by implementing an AST-based codemod focused on safe transformations, edge-case handling, and strict binding preservation.

I used Claude to draft the initial boilerplate for this PR, specifically:

• The recipe scaffolding (codemod.yaml, workflow.yaml, package.json).
• The early draft of the transform structure.
• The initial test fixture skeletons.

I manually implemented, reviewed, and refined the core logic:

• Final transform behavior and safety rules in src/workflow.ts.
• Binding cleanup logic to avoid removing imports when non-call references remain.
• Replacement strategy for cert.subject / cert.issuer vs. generic string parsing.
• Edge-case test coverage (including preserving bindings on references).
• Commit structuring into separate logical steps.
• Local validation (npm run test --workspace @nodejs/tls-parse-cert-string and node --run pre-commit).

Let me know if you want any part tightened further (logic, fixtures, or commit split). I’m happy to adjust.

[AugustinMauroy]

same review as the other pr