fix: trust staging-ca in container to resolve PartialChain gRPC error

Add staging-ca.crt to the Dockerfile so the ASP.NET runtime inside the
container trusts the internal staging CA. This fixes server-side gRPC
calls from FrontOffice (Blazor Server) to https://cms.se.kbs1.ir which
were failing with PartialChain because the container CA store did not
include the staging root certificate.

Also adds GW_URL env support alongside GwUrl for parity with BackOffice.

Co-authored-by: Cursor <cursoragent@cursor.com>

k8s/staging/frontoffice-deployment.yaml

@@ -29,9 +29,9 @@ spec:
             - name: ASPNETCORE_ENVIRONMENT
               value: "Staging"
             - name: GW_URL
-              value: "http://cms-svc:8080"
+              value: "https://cms.se.kbs1.ir"
             - name: GwUrl
-              value: "http://cms-svc:8080"
+              value: "https://cms.se.kbs1.ir"
           resources:
             requests:
               memory: "256Mi"