Propagate DOTNET_ENVIRONMENT to seeder, app, and identity resources

Same gap as the subscriptions fix: these generic-host/web resources
only check DOTNET_ENVIRONMENT (or its host-specific fallback) to
decide whether to accept the self-signed RavenDB server cert, but
Aspire doesn't auto-populate it for them. Confirmed locally - seeder
previously crashed with an unhandled SSL AuthenticationException
during database creation; with this fix the full resource graph
(RavenDB, seeder, app, bff, identity, subscriptions) comes up Running
end-to-end.

Author: Mateosssss

src/RavenDB.Samples.Verity.AppHost/AppHost.cs

@@ -136,7 +136,12 @@
     .WithEnvironment(envSinkCertPfxBase64, sinkCertPfxBase64)
     // Server cert path on the host — seeder uses it as client cert to authenticate to RavenDB
     .WithEnvironment(envServerCertPath, serverCertPath)
-    .WithEnvironment(envRavenDbClientCertificatePath, serverCertPath);
+    .WithEnvironment(envRavenDbClientCertificatePath, serverCertPath)
+    // Seeder is a generic Host (not WebApplication), so Aspire doesn't auto-populate
+    // ASPNETCORE_ENVIRONMENT for it; without DOTNET_ENVIRONMENT the self-signed cert
+    // acceptance in Setup/Program.cs never activates and database creation over the
+    // secured RavenDB connection fails the TLS handshake.
+    .WithEnvironment("DOTNET_ENVIRONMENT", "Development");
 
 // Verity App
 var functions = builder.AddAzureFunctionsProject<RavenDB_Samples_Verity_App>("app")
@@ -167,7 +172,10 @@
     .WithEnvironment(
         envHubServerInternalUrl,
         ReferenceExpression.Create($"https://localhost:{ravenEndpoint.Property(EndpointProperty.TargetPort)}"))
-    .WithEnvironment(envRavenDbClientCertificatePath, serverCertPath);
+    .WithEnvironment(envRavenDbClientCertificatePath, serverCertPath)
+    // Same DOTNET_ENVIRONMENT gap as seeder/subscriptions — needed for the self-signed
+    // cert acceptance in App/Program.cs to activate.
+    .WithEnvironment("DOTNET_ENVIRONMENT", "Development");
 
 // DataSubscriptionsApp — interactive Spectre.Console TUI, must run in its own console window
 // cmd /c start spawns a detached window so Aspire doesn't capture stdin/stdout
@@ -200,7 +208,10 @@
     .WithExternalHttpEndpoints()
     .WithReference(db)
     .WaitFor(db)
-    .WithEnvironment(envRavenDbClientCertificatePath, serverCertPath);
+    .WithEnvironment(envRavenDbClientCertificatePath, serverCertPath)
+    // Same DOTNET_ENVIRONMENT gap as seeder/subscriptions/app — needed for the self-signed
+    // cert acceptance in IdentityServer/Program.cs to activate.
+    .WithEnvironment("DOTNET_ENVIRONMENT", "Development");
 functions.WithEnvironment("Identity__Url", identity.GetEndpoint("http"));
 // BFF — single entry point for the browser; proxies API (with tokens) + frontend
 var bff = builder.AddProject<RavenDB_Samples_Verity_Bff>("bff")