Add HttpClientIgnoreCertificateErrors config support for CI/CD testing

Co-authored-by: StuartFerguson <16325469+StuartFerguson@users.noreply.github.com>

Author: Copilot

EstateManagementUI.BlazorServer/Program.cs

@@ -86,13 +86,25 @@
     var authority = builder.Configuration["Authentication:Authority"];
     var securityServiceLocalPort = builder.Configuration["AppSettings:SecurityServiceLocalPort"];
     var securityServicePort = builder.Configuration["AppSettings:SecurityServicePort"];
+    var httpClientIgnoreCertificateErrors = builder.Configuration.GetValue<bool>("AppSettings:HttpClientIgnoreCertificateErrors", false);
 
     // Use helper method to get adjusted addresses for integration testing
     var (authorityAddress, issuerAddress) = AuthenticationHelpers.GetSecurityServiceAddresses(
         authority, 
         securityServiceLocalPort, 
         securityServicePort);
 
+    // Configure certificate validation bypass for CI/CD testing
+    if (httpClientIgnoreCertificateErrors)
+    {
+        Console.WriteLine("WARNING: Certificate validation is disabled for HttpClient backchannel communication");
+        var handler = new HttpClientHandler
+        {
+            ServerCertificateCustomValidationCallback = HttpClientHandler.DangerousAcceptAnyServerCertificateValidator
+        };
+        options.BackchannelHttpHandler = handler;
+    }
+    
     // Configure OpenID Connect settings
     options.Authority = authorityAddress;
     options.ClientId = builder.Configuration["Authentication:ClientId"];

EstateManagementUI.BlazorServer/appsettings.json

@@ -8,7 +8,8 @@
   "AllowedHosts": "*",
   "AppSettings": {
     "SecurityServiceLocalPort": null,
-    "SecurityServicePort": null
+    "SecurityServicePort": null,
+    "HttpClientIgnoreCertificateErrors": false
   },
   "Authentication": {
     "Authority": "https://localhost:5001",