Connect to managed PG with verify-full TLS yc

Connect via 6432 PgBouncer with YC CA; note: verify-full needs root.crt to pin the host

curl -s https://storage.yandexcloud.net/cloud-certs/CA.pem -o ~/.postgresql/root.crt && psql "host=<host> port=6432 sslmode=verify-full dbname=<name> user=<name> target_session_attrs=read-write"