Stable v2.9.76

• feat(tls): drop registry rows whose certificate is gone from disk
• fix(tls): the recurring registry sweep must not resurrect deleted rows
• fix(tls): the cert registry sync never once succeeded