fix: security remediation follow-up and OLT button layout improvements

- fix Casdoor JWT verification with correct PythonProject public key
- fix iMC TLS cert validation with custom SSL adapter (skip hostname check for non-DNS CN)
- add iMC CA cert and Casdoor public key to build context
- improve OLT manage page: unify button styles, fix mobile grid spacing, replace el-upload with native input for consistent alignment
- swap NTP sync button for duplicate MAC on mobile

Co-Authored-By: Claude <noreply@anthropic.com>

backend/app/core/security.py

@@ -37,7 +37,7 @@ def verify_casdoor_token(token: str) -> dict:
     header = pyjwt.get_unverified_header(token)
     algorithm = header.get("alg")
     if algorithm not in {"RS256", "RS384", "RS512"}:
-        raise ValueError("Unsupported Casdoor token algorithm")
+        raise ValueError(f"Unsupported Casdoor token algorithm: {algorithm}")
 
     return pyjwt.decode(
         token,