refactor: pass verify_ssl to remaining direct-Supervisor httpx callers

Closes homeassistant-ai#1127. Mirrors the verify=self.verify_ssl propagation pattern
established in homeassistant-ai#1126 (rest_client.py:_get_addon_logs_via_supervisor) at
the two other direct-Supervisor httpx call sites:

- tools_bug_report.py:_fetch_addon_logs uses get_global_settings().verify_ssl
  (module-level helper, no self/closure context).
- settings_ui.py:_restart_addon uses server.client.verify_ssl (closure has
  access to server: HomeAssistantSmartMCPServer).

Both paths effectively propagate Settings.verify_ssl via the access route
appropriate to each call site's scope. The http://supervisor URL is plain
HTTP and TLS-irrelevant in practice — the parameter keeps all three
constructor sites consistent with the established HomeAssistantClient
pattern.

Author: Patch76

src/ha_mcp/settings_ui.py

@@ -790,7 +790,9 @@ async def _restart_addon(_: Request) -> JSONResponse:
         # Short timeout — the supervisor kills our process during restart so
         # the connection will drop. A connection drop is actually success.
         try:
-            async with httpx.AsyncClient(timeout=5.0) as client:
+            async with httpx.AsyncClient(
+                timeout=5.0, verify=server.client.verify_ssl
+            ) as client:
                 resp = await client.post(
                     "http://supervisor/addons/self/restart",
                     headers={"Authorization": f"Bearer {token}"},

src/ha_mcp/tools/tools_bug_report.py

@@ -19,6 +19,7 @@
 
 from ha_mcp import __version__
 
+from ..config import get_global_settings
 from ..utils.usage_logger import (
     AVG_LOG_ENTRIES_PER_TOOL,
     get_recent_logs,
@@ -181,7 +182,9 @@ async def _fetch_addon_logs() -> str:
         return ""
 
     try:
-        async with httpx.AsyncClient(timeout=10.0) as http_client:
+        async with httpx.AsyncClient(
+            timeout=10.0, verify=get_global_settings().verify_ssl
+        ) as http_client:
             resp = await http_client.get(
                 "http://supervisor/addons/self/logs",
                 headers={"Authorization": f"Bearer {token}"},