fix(security): pin minimum TLS version in get_domain_from_ssl

ssl.create_default_context() already excludes TLS1/1.1 by default in
modern Python/OpenSSL, but CodeQL flags the implicit reliance on that
default. Pin minimum_version explicitly instead of leaving it to
library defaults.

flowsint-core/src/flowsint_core/utils.py

@@ -188,6 +188,7 @@ def extract_input_schema_flow(model: Type[BaseModel]) -> Dict[str, Any]:
 def get_domain_from_ssl(ip: str, port: int = 443) -> str | None:
     try:
         context = ssl.create_default_context()
+        context.minimum_version = ssl.TLSVersion.TLSv1_2
         with socket.create_connection((ip, port), timeout=3) as sock:
             with context.wrap_socket(sock, server_hostname=ip) as ssock:
                 cert = ssock.getpeercert()

flowsint-enrichers/src/flowsint_enrichers/utils.py

@@ -240,6 +240,7 @@ def extract_input_schema_flow(model: Type[BaseModel]) -> Dict[str, Any]:
 def get_domain_from_ssl(ip: str, port: int = 443) -> str | None:
     try:
         context = ssl.create_default_context()
+        context.minimum_version = ssl.TLSVersion.TLSv1_2
         with socket.create_connection((ip, port), timeout=3) as sock:
             with context.wrap_socket(sock, server_hostname=ip) as ssock:
                 cert = ssock.getpeercert()