mdm-mcp-server

The default `verify_ssl=False` setting in `BaseMDMAdapter` and `AuthenticationManager` is a significant security risk for production environments, as it disables SSL certificate validation, making the application vulnerable to Man-in-the-Middle attacks. Additionally, the `jwt.decode` operation in `AuthenticationManager` uses `verify_signature=False`, which critically weakens JWT security by trusting tokens without cryptographic verification of their origin, potentially allowing forged tokens if the authentication server or communication channel is compromised. While credentials are read from environment variables, these two default behaviors pose severe vulnerabilities.