Added CBL_Replicator option to pin to a specific SSL cert

Set the option "pinnedCert" to the data of the desired certificate, or
to the SHA-1 digest of its public key. (A string of hex is OK too.)
Any non-matching SSL server cert will be rejected.