- Define koji_hub_ssl_verify_client in vars/default.yaml with a warning comment.
- Update roles/koji_hub/tasks/main.yaml to use the new variable.
- Helps document why it is optional in dev/staging (avoid TLS 1.3 PHA) and require in production.
Co-developed-by: Gemini AI <renich+gemini@woralelandia.com>
Signed-off-by: Rénich Bon Ćirić <renich@woralelandia.com>