bud: new package

This adds `bud`, a TLS terminating proxy.