feat(router): add optional TLS for apps + store