home-assistant: a new MQTT entry says plain MQTT for its certificate choices

Home Assistant's MQTT user flow shows no value for set_ca_cert and set_client_cert (a reconfigure
pre-fills them from the entry), and refuses a submit without them — found against the pinned
2026.9.3 in a throwaway instance.

modules/home-assistant/provisions/connections.ts

@@ -246,8 +246,15 @@ async function createEntry(deps: MqttDeps, want: MqttWanted, note?: string): Pro
   if (flow.type !== "form" || !flow.flow_id) {
     return { what, result: "refused", problem: `Home Assistant's MQTT user flow answered ${describe(flow)}` };
   }
+  const shown = formValues(flow.data_schema);
+  // A new entry's form has no value for its two certificate choices (a reconfigure pre-fills them
+  // from the entry): plain MQTT, so neither a CA nor a client certificate.
+  const other = (shown.other_settings ?? {}) as Record<string, unknown>;
+  if (flow.data_schema?.some((f) => f.name === "other_settings")) {
+    shown.other_settings = { set_ca_cert: "off", set_client_cert: false, ...other };
+  }
   flow = await deps.hass.stepFlow(flow.flow_id, {
-    ...formValues(flow.data_schema),
+    ...shown,
     broker: want.host,
     port: want.port,
     username: want.username,