calm-hub: quarkus.oidc.tls.verification=none in application-secure.properties

`application-secure.properties` sets `quarkus.oidc.tls.verification=none`, disabling TLS certificate verification for OIDC calls under that profile. Confirmed pre-existing — not touched by #3066's diff, out of scope for that PR.

**Fix**: needs investigation into why this was set (likely a local/dev-cert convenience) and whether it's still needed, or should be scoped to a narrower profile than "secure".

Start by reading application-secure.properties and the context around the #3066 diff, then investigate why OIDC TLS verification is disabled for the secure profile. Done means the setting’s required scope is established and the configuration no longer disables certificate verification more broadly than necessary.

Written by the indexing model from the issue text.