feat: HSM main/slave certificate comparison with batch SQL generation

- compare usercert_tab by subject raw bytes + certtype
- generate single annotated CSV report
- generate merge-<timestamp>.sql in current directory for DBA execution
- preserve GBK DN bytes via ATTACH + INSERT OR REPLACE / UPDATE
- compatible with sqlite3 3.6.20 and JDK 1.8

.gitignore

@@ -0,0 +1,8 @@
+target/
+*.class
+reports/
+merge-*.sql
+*.db.bak-*
+*.tmp
+.idea/
+*.iml