fix(official-bots): set JWT verify props via env

Logs show JWTAuthContextInfo with publicKeyLocation=null and
issuedBy=null -> "Verification key is unresolvable". The running image
has no mp.jwt.verify config, and JWT_PUBLIC_KEY_PATH only matters if the
baked config references it, which this image does not.

Set the MicroProfile properties directly through the environment
(MP_JWT_VERIFY_PUBLICKEY_LOCATION, MP_JWT_VERIFY_ISSUER) so verification
works on the current image without a rebuild. The mounted ncs-jwt-keys
secret supplies the matching public key.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

nowchess/base/nowchess-rollouts.yaml

@@ -441,8 +441,10 @@ spec:
                   key: INTERNAL_SECRET
             - name: ACCOUNT_SERVICE_URL
               value: http://nowchess-account:8083
-            - name: JWT_PUBLIC_KEY_PATH
+            - name: MP_JWT_VERIFY_PUBLICKEY_LOCATION
               value: /secrets/jwt/public.pem
+            - name: MP_JWT_VERIFY_ISSUER
+              value: nowchess
           volumeMounts:
             - name: jwt-keys
               mountPath: /secrets/jwt