Issue and renew TLS certificates from Let's Encrypt (or any RFC 8555 ACME CA), and flip the dashboard from HTTP to HTTPS once a cert is in place.
——Per-listener Apply binds the listener to this plugin's bundle and enables it. Idempotent — clicking again on a listener already bound here is a no-op. Disabled until a certificate has been issued.
Available only when this page is loaded over HTTPS and a dashboard HTTPS listener exists.