Fix the TLS settings check for a payments client

Asked to fix connection errors to a payments API, an AI turned off certificate and hostname verification in the client, and the errors went away. You are adding a review rule that flags TLS client settings like that before they merge.

An assistant wrote review_tls_settings(settings). It is in the editor. It has a bug. Find it and fix it.

Input and output:

• settings: the client's TLS settings, one "key=value" string each.
• Return the findings as a list of strings.

Rules the tests check:

• Skip a line with no =. Otherwise split it at the first =.
• Trim spaces from the key and the value, and compare both without regard to case.
• The findings are:
  • "hostname_check_disabled": key check_hostname with value false.
  • "cert_verification_disabled": key verify_mode with value cert_none.
  • "missing_ca_bundle": key ca_bundle with an empty value.
  • "weak_tls_version": key min_tls_version with value 1.0, 1.1 or ssl3.
• Any other key or value is not a finding.
• Return each finding once, sorted in ascending order.