What kind of change does this PR introduce?

Bug fix.

What is the current behavior?

CLI 2.75.x attempts a TLS connection even when sslmode=disable is set in --db-url, causing tls error (server refused TLS connection). The same command succeeds with --debug because TLS is disabled there.
Issue: #4839 (regression of #4288)

What is the new behavior?

When sslmode=disable is present in the connection string, the CLI explicitly disables TLS, so non‑TLS self‑hosted databases connect successfully without needing --debug.

Additional context

This aligns normal behavior with the --debug path, which already disables TLS. No user‑visible changes beyond respecting sslmode=disable.