[docs] Document partial Linux certificate trust behavior for aspire certs trust

src/frontend/src/content/docs/reference/cli/commands/aspire-certs-trust.mdx

@@ -4,6 +4,7 @@ description: Learn about the aspire certs trust command and its usage. This comm
 ---
 
 import Include from '@components/Include.astro';
+import { Aside } from '@astrojs/starlight/components';
 
 ## Name
 
@@ -21,6 +22,29 @@ The `aspire certs trust` command trusts the HTTPS development certificate used b
 
 Use this command when you want to prepare a machine for Aspire local development or re-establish trust after cleaning development certificates.
 
+<Aside type="note">
+  On non-interactive Linux runs (`aspire certs trust --non-interactive`), a
+  certificate that ends up only *partially* trusted (OpenSSL trust succeeds,
+  but browser/NSS trust via `certutil` can't complete) is treated as a success
+  instead of a hard failure. This only happens when the post-trust check
+  confirms the certificate is actually partially trusted; interactive Linux
+  runs and genuine trust failures still fail as before. When this occurs, the
+  command prints a warning explaining that CLI HTTPS diagnostics can continue
+  even though browser trust may remain incomplete. A shell invocation that also
+  prints the command's exit code can produce output like this:
+
+```text
+Developer certificates may not be fully trusted (trust exit code was: PartiallyFailedToTrustTheCertificate).
+HTTPS development certificate was partially trusted. Continuing because partial trust is usable for CLI HTTPS diagnostics on Linux; browser trust may still be incomplete.
+EXIT:0
+```
+
+Run [`aspire doctor`](../aspire-doctor/) to check the OpenSSL certificate
+cache and whether `certutil` is available when browser trust remains
+incomplete.
+
+</Aside>
+
 ## Options
 
 The following options are available:
@@ -45,7 +69,14 @@ The following options are available:
   aspire certs trust
   ```
 
+- Trust the certificate non-interactively, for example on a Linux CI runner:
+
+  ```bash title="Aspire CLI"
+  aspire certs trust --non-interactive
+  ```
+
 ## See also
 
 - [aspire certs](../aspire-certs/)
 - [aspire certs clean](../aspire-certs-clean/)
+- [aspire doctor](../aspire-doctor/)