Replace TLS checkbox with security dropdown (None/STARTTLS/SSL)

Replace the single IMAP TLS checkbox with a per-protocol security
dropdown for IMAP, SMTP, and Sieve. The security scheme (ssl:// or
tls://) is now stored directly in the host field, unifying the approach
across all protocols.

Smart form behavior:
- Default ports update automatically when changing security type
- Fields clear on blur when value matches the placeholder
- Warning shown when selecting no encryption
- Defaults: IMAP SSL/993, SMTP STARTTLS/587, Sieve STARTTLS/4190

The DB_SECURE_IMAP_TLS flag is no longer written but still read for
backward compatibility with existing records.

localization/de_DE.inc

@@ -23,8 +23,8 @@ $labels['form.imap.caption'] = 'IMAP';
 // Server host name
 $labels['form.imap.host'] = 'Servername';
 
-// Secure connection (TLS)
-$labels['form.imap.tls'] = 'Sichere Verbindung (TLS)';
+// Security
+$labels['form.imap.security'] = 'Sicherheit';
 
 // Port
 $labels['form.imap.port'] = 'Port';
@@ -48,8 +48,8 @@ $labels['form.smtp.caption'] = 'SMTP';
 // Server host name
 $labels['form.smtp.host'] = 'Servername';
 
-// Secure connection (TLS)
-$labels['form.smtp.tls'] = 'Sichere Verbindung (TLS)';
+// Security
+$labels['form.smtp.security'] = 'Sicherheit';
 
 // Port
 $labels['form.smtp.port'] = 'Port';
@@ -70,6 +70,9 @@ $labels['form.sieve.caption'] = 'Sieve';
 // Server host name
 $labels['form.sieve.host'] = 'Servername';
 
+// Security
+$labels['form.sieve.security'] = 'Sicherheit';
+
 // Port
 $labels['form.sieve.port'] = 'Port';
 
@@ -111,6 +114,20 @@ $labels['form.notify.off'] = 'Aus';
 $labels['form.notify.requires_newmail_notifier'] = 'Benachrichtigungen erfordern das Plugin newmail_notifier. Bitte aktivieren Sie es oder kontaktieren Sie Ihren Administrator.';
 
 
+// Security options
+// None
+$labels['form.security.none'] = 'Keine';
+
+// STARTTLS
+$labels['form.security.starttls'] = 'STARTTLS';
+
+// SSL/TLS
+$labels['form.security.ssl'] = 'SSL/TLS';
+
+// None warning
+$labels['form.security.none_warning'] = 'Unverschlüsselte Verbindungen sind unsicher. Ihre Anmeldedaten und E-Mails können abgefangen werden. Verwenden Sie nach Möglichkeit SSL/TLS oder STARTTLS.';
+
+
 // Errors
 
 // Value in \'Server host name\' field is too long (64 chars max).