[Fuwn]

Summary

• Validate server certificates by default, and add configurable CA roots and caller-owned trust-on-first-use storage.
• Validate request and response framing, preserve response bytes and unknown status codes, and add timeout and response-size limits.
• Correct Gemtext parsing, HTML and Markdown escaping, metadata handling, and optional feature gates.
• Simplify the public Gemtext APIs, update the examples and documentation, and set the crate version to 0.5.0.

Compatibility

This release removes Ast::from_owned, Ast::from_value, and the public EXAMPLE_GEMTEXT feature and constant. Ast::from_string and convert::from_string now accept AsRef<str>, and quick::link takes the URL before the optional label. Requests that previously accepted untrusted certificates now require configured roots or the opt-in TOFU API.