Allow multiple SSL policies, add API-specific verify mode setting

Split SSL policy into a class/visitor pattern thing that you can pick with DI. This allows different HTTP clients in chef to pick different SSL behaviors depending on use case and be configured independently.

Also adds a configuration setting to enable verify_peer for just API requests.