Feature Request: Support TFO for SS protocol and "Allow Insecure" self-signed IP certs without SNI for HY2

Hi team,

I would like to request support for two features when fetching/parsing subscriptions:

  1. TCP Fast Open (TFO) for Shadowsocks (SS) protocol: Ability to parse and enable TFO flags directly from the subscription links.

  2. “Allow Insecure” / Self-Signed IP Certificates without SNI for Hysteria 2 (HY2): Support parsing and allowing connection configs that use insecure=1 / self-signed certificates on pure IP addresses where SNI is absent.

Thanks for your hard work on this project!