feat(temporal): add TEMPORAL_TLS_ENABLED to override gRPC TLS setting

Allows Temporal connection to use different TLS settings than
other gRPC clients. Useful when internal Temporal doesn't use TLS
but other gRPC services do.

Author: batazor

temporal/temporal.go

@@ -40,6 +40,9 @@ import (
 //   - GRPC_CLIENT_TLS_ENABLED: Enable TLS (default: false)
 //   - GRPC_CLIENT_TIMEOUT: Request timeout (default: 10s)
 //
+// Temporal-specific overrides:
+//   - TEMPORAL_TLS_ENABLED: Override TLS for Temporal connection (optional, uses GRPC_CLIENT_TLS_ENABLED if not set)
+//
 // Reference: https://docs.temporal.io/develop/go/temporal-client
 func New(
 	l logger.Logger,
@@ -55,6 +58,11 @@ func New(
 	namespace := cfg.GetString("TEMPORAL_NAMESPACE")
 	identity := cfg.GetString("TEMPORAL_IDENTITY")
 
+	// Override TLS setting for Temporal if TEMPORAL_TLS_ENABLED is explicitly set
+	if cfg.IsSet("TEMPORAL_TLS_ENABLED") {
+		cfg.Set("GRPC_CLIENT_TLS_ENABLED", cfg.GetBool("TEMPORAL_TLS_ENABLED"))
+	}
+
 	// Build gRPC dial options using go-sdk/grpc
 	grpcOpts := []sdkgrpc.Option{
 		sdkgrpc.WithLogger(l),