MX-219: Fix self-service HTTPS auth and runreports IT

[DeathGun44]

Overview

This pull request resolves integration test failures and refines the self-service API authentication logic. It updates the testcontainers configuration to align with Fineract's strict HTTPS requirements and ensures accurate role-based constraint verifications during login.

Key Changes

• HTTPS Enforcement for Integration Tests: Switched SelfServiceIntegrationTestBase to use Fineract's default secure port (8443) and enabled SSL (FINERACT_SERVER_SSL_ENABLED=true). Updated the health check strategy to securely wait for the actuator using .allowInsecure().
• RestAssured Configurations: Enabled .relaxedHTTPSValidation() in SelfServiceTestUtils so local RestAssured clients can successfully bypass the self-signed certificate constraints in ITs.
• Robust Fineract IT Image Selection: Introduced environment (FINERACT_IT_IMAGE) and system properties (-Dfineract.it.image) to dynamically override the docker image used by Testcontainers, with a fallback to apache/fineract:develop.
• Self-Service Module Alignment: Corrected the environment variable for enabling self-service in the container to use FINERACT_MODULE_SELFSERVICE_ENABLED.
• Authentication Resilience: Strengthened TenantAwareJpaPlatformSelfServiceUserDetailsService to actively block login attempts and throw UsernameNotFoundException if the user lacks the explicit Self-Service role flag or if the role isn't appropriately authorized for self-service functionality.

Verification

• All Unit and System Integration tests (./mvnw clean verify) pass successfully using testcontainers.

[IOhacker]

LGTM