feat: HTTPS admin console via Traefik with NODE_TLS_REJECT_UNAUTHORIZED

ADMIN_ENDPOINT set to HTTPS so OIDC issuer matches browser URL.
NODE_TLS_REJECT_UNAUTHORIZED=0 lets Logto's internal ky-based
OIDC self-discovery accept the self-signed cert through Traefik.
Remove in production with real certs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

traefik.yml

@@ -11,6 +11,8 @@ entryPoints:
           scheme: https
   websecure:
     address: ":443"
+  admin-console:
+    address: ":3002"
 
 providers:
   docker: