[FLINK-38522][cdc connector mysql] use ssl for BinaryLogClient when searching for binlog offset for starting mysql cdc from timestamp

[watsonjo737]

https://issues.apache.org/jira/browse/FLINK-38522

What is the purpose of the change

When using StartupOptions.timestamp(), the MySQL CDC connector calls DebeziumUtils.findBinlogOffset() to locate the appropriate binlog position. This method creates a short-lived BinaryLogClient to scan binlog files, but does not configure SSL mode on the client.

If the MySQL server requires SSL connections (e.g., require_secure_transport=ON or SSL mode configured in connection parameters), the connection fails because the BinaryLogClient attempts an unencrypted connection.

This Pull Request uses the ssl mode provided as part of the connection config for the BinaryLogClient as well to prevent this issue in cases where mysql is configured for require_secure_transport.

Changes

Set SSLMode to match what was provided in the connectionConfig for BinaryLogClient Add unit test to ensure SSLMode is converted correctly.

Verifying this change

1. Configure MySQL with require_secure_transport=ON or SSL mode requirements
2. Create a MySQL CDC source with StartupOptions.timestamp(timestampMs)
3. Start the Flink job
4. Ensure that the source is able to read records from the specified timestamp.