Suppress tier2 TLS handshake noise from plain-HTTP probes

[maoueh]

Summary

• Load balancers and health probes often speak plain HTTP to tier2's TLS port, producing noisy tls: first record does not look like a TLS handshake ERROR logs.
• Tier2 already suppressed related handshake noise (EOF, connection reset by peer); this adds the missing "first record does not look like a TLS handshake" pattern via the existing WithSuppressHTTPError list.
• Changelog entry under Unreleased.

Test plan

• Deploy/restart a tier2 with TLS listen (or reproduce with plain HTTP against the TLS port)
• Confirm the first record does not look like a TLS handshake lines no longer appear at ERROR
• Confirm real client TLS/gRPC traffic is unaffected
• Optionally verify EOF / connection-reset suppress patterns still work as before

[sduchesneau]

🔍 Vulnerabilities of ghcr.io/streamingfast/substreams:a23124c

📦 Image Reference ghcr.io/streamingfast/substreams:a23124c

digest	sha256:4633662c9cced629bc06f3a6989de14c6cd07df7c647ce9c146957932957aec0
vulnerabilities
platform	linux/amd64
size	120 MB
packages	381

📦 Base Image ubuntu:24.04

also known as	noble noble-20260610
digest	sha256:52df9b1ee71626e0088f7d400d5c6b5f7bb916f8f0c82b474289a4ece6cf3faf
vulnerabilities