fix: disable TLS encryption by default to avoid ServerName IP address warning

- Set encrypt: false as default for SQL Server connections
- Fixes DEP0123 deprecation warning when connecting via IP address (VPN tunnel)
- trustServerCertificate option still configurable via environment variable
- Affects 6 files: sql-server.ts, bip-users-dao.ts, database/index.ts,
  database/data-source.ts, cleaner-handler.ts, validation-handler.ts

src/main/ipc/cleaner-handler.ts

@@ -28,7 +28,7 @@ async function getDatabaseService(): Promise<MySqlService | SqlServerService> {
       password: process.env.DB_PASSWORD || '',
       database: process.env.DB_NAME || '',
       options: {
-        encrypt: process.env.DB_TRUST_SERVER_CERTIFICATE === 'yes',
+        encrypt: false,
         trustServerCertificate: process.env.DB_TRUST_SERVER_CERTIFICATE === 'yes'
       }
     })
@@ -110,7 +110,7 @@ export function registerCleanerHandlers(): void {
             url: erpUrl,
             username: erpUsername,
             password: erpPassword,
-            headless: true
+            headless: input.headless ?? true
           })
 
           log.info('Logging in to ERP...')