PHASE_VERIFY_SSL env var is never read — SSL bypass doesn't work

[nimish-ks]

Summary

The CLI error message for SSL errors tells users to set PHASE_VERIFY_SSL=False to bypass certificate verification:

🗿 SSL error: ... You may set PHASE_VERIFY_SSL=False to bypass this check

However, PHASE_VERIFY_SSL is never read from the environment anywhere in the CLI. The misc.VerifySSL flag in the Go SDK defaults to true and is only set to false internally by sdk.New() — but only for commands that go through NewPhase(), not for pre-auth API calls like external identity authentication.

Impact

• phase auth --mode aws-iam and phase auth --mode azure fail on self-hosted instances with self-signed certificates
• The error message is misleading — it suggests a fix that doesn't work

Suggested Fix

Read PHASE_VERIFY_SSL early in the CLI root command (or PersistentPreRun) and set misc.VerifySSL = false before any SDK calls:

func init() {
    if strings.EqualFold(os.Getenv("PHASE_VERIFY_SSL"), "false") {
        misc.VerifySSL = false
    }
}

This should be done in a central location (e.g. root.go PersistentPreRun) so it applies to all commands, not just phase auth.