add SSL toggle and evidence image support

[TheGr3atJosh]

Summary

• This PR allow Ghostbadger to work with locally installed instances of Ghostwriter
• SSL verification toggle — GHOSTWRITER_VERIFY_SSL=false disables cert checking for self-signed Ghostwriter certs
• Evidence images in PDFs — fetch_evidence tries HTTP (JWT Bearer to /media/) first; if that fails and GHOSTWRITER_MEDIA_PATH is set, falls back to reading
  directly from a mounted media volume (useful for local Docker deployments where Ghostwriter runs on the same host)
• compose.yaml — all optional config commented out by default; both evidence approaches documented inline

Configuration

Remote Ghostwriter — no changes needed; HTTP fetch works automatically once ALLOWED_HOSTS includes the ghostbadger host.

Local Docker (same host) — uncomment three lines in compose.yaml:

- GHOSTWRITER_MEDIA_PATH=/ghostwriter_media                                                                                                                                 
# ...                                      
- ghostwriter_production_data:/ghostwriter_media:ro                                                                                                                         
# ...                                                     
volumes:                               
  ghostwriter_production_data:                                                                                                                                              
    external: true            

Test plan

• Render a report with evidence images — confirm they appear in the PDF
• Set GHOSTWRITER_VERIFY_SSL=false — confirm self-signed cert no longer blocks requests
• Without volume mount — confirm HTTP fetch is attempted and gracefully falls back

🤖 Generated with Claude Code