Replace TLS checkbox with security dropdown (None/STARTTLS/SSL)

Replace the single IMAP TLS checkbox with a per-protocol security
dropdown for IMAP, SMTP, and Sieve. The security scheme (ssl:// or
tls://) is now stored directly in the host field, unifying the approach
across all protocols.

Smart form behavior:
- Default ports update automatically when changing security type
- Fields clear on blur when value matches the placeholder
- Warning shown when selecting no encryption
- Defaults: IMAP SSL/993, SMTP STARTTLS/587, Sieve STARTTLS/4190

The DB_SECURE_IMAP_TLS flag is no longer written but still read for
backward compatibility with existing records.

localization/it_IT.inc

@@ -23,8 +23,8 @@ $labels['form.imap.caption'] = 'IMAP';
 // Server host name
 $labels['form.imap.host'] = 'Nome del server';
 
-// Secure connection (TLS)
-$labels['form.imap.tls'] = 'Connessione sicura (TLS)';
+// Security
+$labels['form.imap.security'] = 'Sicurezza';
 
 // Port
 $labels['form.imap.port'] = 'Porta';
@@ -48,8 +48,8 @@ $labels['form.smtp.caption'] = 'SMTP';
 // Server host name
 $labels['form.smtp.host'] = 'Nome del server';
 
-// Secure connection (TLS)
-$labels['form.smtp.tls'] = 'Connessione sicura (TLS)';
+// Security
+$labels['form.smtp.security'] = 'Sicurezza';
 
 // Port
 $labels['form.smtp.port'] = 'Porta';
@@ -70,6 +70,9 @@ $labels['form.sieve.caption'] = 'Sieve';
 // Server host name
 $labels['form.sieve.host'] = 'Nome del server';
 
+// Security
+$labels['form.sieve.security'] = 'Sicurezza';
+
 // Port
 $labels['form.sieve.port'] = 'Porta';
 
@@ -111,6 +114,20 @@ $labels['form.notify.off'] = 'Disattivo';
 $labels['form.notify.requires_newmail_notifier'] = 'Le notifiche richiedono il plugin newmail_notifier. Abilitarlo o contattare l\'amministratore.';
 
 
+// Security options
+// None
+$labels['form.security.none'] = 'Nessuna';
+
+// STARTTLS
+$labels['form.security.starttls'] = 'STARTTLS';
+
+// SSL/TLS
+$labels['form.security.ssl'] = 'SSL/TLS';
+
+// None warning
+$labels['form.security.none_warning'] = 'Le connessioni non crittografate non sono sicure. Le credenziali e le email possono essere intercettate. Utilizzare SSL/TLS o STARTTLS quando possibile.';
+
+
 // Errors
 
 // Value in \'Server host name\' field is too long (64 chars max).