Auto-mode rules get their own cloud-session notice, and stalled TLS handshakes time out

What

• Auto-mode rules: when a setting that restricts a cloud session is only auto-mode rules, the compatibility message gives a separate auto_mode_rules reason with its own text. Before, every restricting setting was reported as a tool restriction.
• Stalled connections: a TLS handshake is the first exchange that sets up a secure connection to a server. If it does not finish in time, HTTPS requests now stop with ERR_TLS_HANDSHAKE_STALLED and the message "The TLS handshake with the server did not finish in the time allowed, normally 120 seconds. Check the network or proxy." This error is treated as its own kind of network failure.

Why

Cloud sessions with auto-mode rules get a more accurate explanation, and a stuck connection gives a clear error pointing to the network or proxy instead of hanging.