API: Added CBLReplication.serverCertificate

This allows the client to capture the server's SSL certificate, and
later pin the replication to that same cert. It can also examine the
certificate's metadata if it wants.