mkdev: trusted HTTPS for localhost, mapped by name

A single Go binary that maps https://myapp.local → localhost:3000 with a real, system-trusted cert. No per-project config, no browser warnings.