fix: disable TLS encryption by default to avoid ServerName IP address warning

- Set encrypt: false as default for SQL Server connections
- Fixes DEP0123 deprecation warning when connecting via IP address (VPN tunnel)
- trustServerCertificate option still configurable via environment variable
- Affects 6 files: sql-server.ts, bip-users-dao.ts, database/index.ts,
  database/data-source.ts, cleaner-handler.ts, validation-handler.ts

src/main/services/database/data-source.ts

@@ -40,7 +40,7 @@ function buildDataSourceOptions(): DataSourceOptions {
       password: process.env.DB_PASSWORD || '',
       database: process.env.DB_NAME || '',
       options: {
-        encrypt: process.env.DB_TRUST_SERVER_CERTIFICATE === 'yes',
+        encrypt: false,
         trustServerCertificate: process.env.DB_TRUST_SERVER_CERTIFICATE === 'yes'
       },
       ...commonOptions

src/main/services/database/index.ts

@@ -57,7 +57,7 @@ export function createSqlServerConfig(): SqlServerConfig {
     password: process.env.DB_PASSWORD || '',
     database: process.env.DB_NAME || '',
     options: {
-      encrypt: process.env.DB_TRUST_SERVER_CERTIFICATE === 'yes',
+      encrypt: false,
       trustServerCertificate: process.env.DB_TRUST_SERVER_CERTIFICATE === 'yes'
     }
   }

src/main/services/database/sql-server.ts

@@ -35,7 +35,7 @@ export class SqlServerService implements IDatabaseService {
         password: this.config.password,
         database: this.config.database,
         options: {
-          encrypt: this.config.options?.encrypt ?? true,
+          encrypt: this.config.options?.encrypt ?? false,
           trustServerCertificate: this.config.options?.trustServerCertificate ?? false
         }
       }